Static task
static1
Behavioral task
behavioral1
Sample
38c222762cb2e4585527986aa09d2db5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
38c222762cb2e4585527986aa09d2db5_JaffaCakes118
-
Size
180KB
-
MD5
38c222762cb2e4585527986aa09d2db5
-
SHA1
6ffa88e0f6afda393979655104ad54ae95b39bfc
-
SHA256
6503c5be4c18c5ddd5e0378488a62a79d1cc164fffe1989fca155ad4ec3e6ab4
-
SHA512
1ce0d11b3e107573edb1f1fa264d7d02359cd3fc7ffa9bf3328bb181fee4a9e0b8735dbec410c3200a8a2471282ed93ad0a9479a02758927a4ac68d362172e8b
-
SSDEEP
3072:IKSCnoBHNUr0qg4zIZHVDpwdD8WfXlXJzWUjFu4jFur:z0NUoDqIZHoD9TtP2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38c222762cb2e4585527986aa09d2db5_JaffaCakes118
Files
-
38c222762cb2e4585527986aa09d2db5_JaffaCakes118.exe windows:4 windows x86 arch:x86
1a43502731eb6ab09f964abebdb7b30f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameA
ExpandEnvironmentStringsA
_lclose
_lopen
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
OpenMutexA
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
CloseHandle
CreateMutexA
VirtualAlloc
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetStringTypeW
user32
FindWindowExA
LoadCursorFromFileA
SetSystemCursor
KillTimer
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
DestroyWindow
CreateWindowExA
ShowWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
SetTimer
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ