Static task
static1
Behavioral task
behavioral1
Sample
471c3b2ed57394fd5f4c663c403ecd01_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
471c3b2ed57394fd5f4c663c403ecd01_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
471c3b2ed57394fd5f4c663c403ecd01_JaffaCakes118
-
Size
616KB
-
MD5
471c3b2ed57394fd5f4c663c403ecd01
-
SHA1
292b7dd8259b5d0f5ae591d8673051728e713538
-
SHA256
c8887393a3a662afc99832fa7c3fe5843541e72e91200c334e7c3f1d318f6b51
-
SHA512
eedd162eae3ad17c34598f90f8facb7308c39a1193f5975ba5788ebf5e835e331956ff49b101c9b52929e4ea42410a8dd0d9306b8fd0d2923357dc2390153eff
-
SSDEEP
12288:q8axet7q10zjkoeBDE11YH/unh/FhUR3Y1QMoMiFcWG:qnethe+11YGtTURI2B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 471c3b2ed57394fd5f4c663c403ecd01_JaffaCakes118
Files
-
471c3b2ed57394fd5f4c663c403ecd01_JaffaCakes118.exe windows:4 windows x86 arch:x86
9cc7a5156f0f5af45757c684158cde51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetTempPathA
LoadLibraryA
FreeResource
WriteFile
LoadResource
FindResourceA
GetStringTypeA
LCMapStringW
CloseHandle
GetProcAddress
LockResource
FreeLibrary
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
MessageBoxA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 580KB - Virtual size: 578KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ