Static task
static1
Behavioral task
behavioral1
Sample
408df0b43e2090220a6ba25756065423_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
408df0b43e2090220a6ba25756065423_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
408df0b43e2090220a6ba25756065423_JaffaCakes118
-
Size
184KB
-
MD5
408df0b43e2090220a6ba25756065423
-
SHA1
0129d964047916109874d99b44b5ec644eff8ec9
-
SHA256
ef07d628704436c089b9f410f7159f086eea856257f1ba0014b437fa6bf5e37f
-
SHA512
ac9729a218ec0e5f898c90b54ed16bfa7cd752ec62b7eed1dba2fbb980613cdcf4f8fb10d098b7eab25dd660e72eacecada3497b1a6769d49668550535827251
-
SSDEEP
768:qIj25XM3W+KflI09eMK6GIsVXp5bP1VjERldi8AOyNLwo:qIqU5KanRWs1p5nQRldi8fZo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 408df0b43e2090220a6ba25756065423_JaffaCakes118
Files
-
408df0b43e2090220a6ba25756065423_JaffaCakes118.exe windows:4 windows x86 arch:x86
f4f32267860fdc31ee90fb8441948a9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetCurrentDirectoryA
Sleep
Beep
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
GetLastError
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE