Static task
static1
Behavioral task
behavioral1
Sample
3671b941e16373e01fc921d0f7051f83_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3671b941e16373e01fc921d0f7051f83_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3671b941e16373e01fc921d0f7051f83_JaffaCakes118
-
Size
40KB
-
MD5
3671b941e16373e01fc921d0f7051f83
-
SHA1
04e9700abdd049c66edf2811b09d92475fb66164
-
SHA256
467953ec01172b8250e93b92e5a65e1ff001d699fe3d240d31c0ee68bc474029
-
SHA512
e76a884eaa4852757969a60898f952c740866b4c8d31e57227e882ed504d1e3a0a85097349a802688c69d43e9e8604db52a52beaacc3a7940dc7d2ed5264965a
-
SSDEEP
384:bCy2ymNVivd9FAXCtCzMI7pQB6hj/CrAqWWy5+hbIYG2QW9oIUw:sNViRYppNhjarDWYmW9o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3671b941e16373e01fc921d0f7051f83_JaffaCakes118
Files
-
3671b941e16373e01fc921d0f7051f83_JaffaCakes118.exe windows:4 windows x86 arch:x86
38992ae182031dfc5745276634dbd95f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
Sleep
DeleteFileA
LCMapStringA
ReadFile
SetEndOfFile
SetFilePointer
GetLastError
MoveFileA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
LCMapStringW
wininet
DeleteUrlCacheEntry
urlmon
URLDownloadToFileA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE