Static task
static1
Behavioral task
behavioral1
Sample
359703bc7ed44e437e14e28109ac1187_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
359703bc7ed44e437e14e28109ac1187_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
359703bc7ed44e437e14e28109ac1187_JaffaCakes118
-
Size
191KB
-
MD5
359703bc7ed44e437e14e28109ac1187
-
SHA1
f4fec8baa51b698ff3bb71641a675310511193f3
-
SHA256
1b8bd9331918566fb0ae19ec72a41b5e69b399825592611655d8ca8c096fe8ea
-
SHA512
c184584f1fb2435041583ef7b3d4a6ed17b002d08dd7561001e1da8e58f90c63064d6fbc08e4ae4b99d5275bc4cf21d52483f7b2a65a10e35d4f9dcf9cef4d38
-
SSDEEP
3072:6rUY5/NUnY7G/AWN/2uhItKS74EO1nwHCh6VkENw7vhjLap:6rUKmnQShItKe4z+C3Ei7vhjs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 359703bc7ed44e437e14e28109ac1187_JaffaCakes118
Files
-
359703bc7ed44e437e14e28109ac1187_JaffaCakes118.exe windows:4 windows x86 arch:x86
e2ea4586284519dfb2ebcc8154adaaa4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoA
ExitProcess
GetCommandLineA
GetCurrentDirectoryA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetVersion
IsDebuggerPresent
LoadLibraryA
LoadLibraryExA
MulDiv
SetCurrentDirectoryA
Sleep
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
user32
ClientToScreen
GetWindowThreadProcessId
PeekMessageA
gdi32
CreateDIBSection
CreateHalftonePalette
GetDeviceCaps
MoveToEx
RealizePalette
SetBkMode
SetBrushOrgEx
SetStretchBltMode
SetTextColor
shell32
DoEnvironmentSubstW
ExtractIconExW
SHGetFileInfoW
SHGetFolderLocation
SHGetMalloc
SHGetPathFromIDList
SHGetSettings
ShellExecuteEx
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ