Static task
static1
Behavioral task
behavioral1
Sample
439d2138038ac1823c767fd2d1591023_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
439d2138038ac1823c767fd2d1591023_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
439d2138038ac1823c767fd2d1591023_JaffaCakes118
-
Size
46KB
-
MD5
439d2138038ac1823c767fd2d1591023
-
SHA1
1c338fe98a04d71eeefeb989119d1825abef1ed2
-
SHA256
f8dc329d081b1fd1f25179ad84c1d6ebd5ba155af2e0bcc4a066525bb4dfd44c
-
SHA512
c555059ea70238b8701cb5bbd7fa85a59f211655c194691f99259351cd3119ce454ef8c61c59f2b05164fd1148099de518b65d81092c0a8d87e3327c51885857
-
SSDEEP
768:fJJxObvyJFuffYmtwFT39MB+bbBhbc5VjngLPw4LJIpJKZa:TufwmtkNMmNh6+PwLpkZa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 439d2138038ac1823c767fd2d1591023_JaffaCakes118
Files
-
439d2138038ac1823c767fd2d1591023_JaffaCakes118.exe windows:5 windows x86 arch:x86
cc99e05b7190a016eb4e7dbb3f398a80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
EnterCriticalSection
ExitProcess
FindResourceA
FreeResource
GetACP
GetCommandLineA
GetDateFormatA
GetLastError
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTime
HeapAlloc
InitializeCriticalSection
MapViewOfFile
MultiByteToWideChar
OpenFile
SetEndOfFile
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
msvcrt
__getmainargs
__p__commode
__set_app_type
_cexit
exit
rand
setlocale
sscanf
vswprintf
ole32
CoCreateGuid
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromGUID2
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ