Static task
static1
Behavioral task
behavioral1
Sample
43d018f9f2dc42579b044b3f7d78d993_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43d018f9f2dc42579b044b3f7d78d993_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43d018f9f2dc42579b044b3f7d78d993_JaffaCakes118
-
Size
712KB
-
MD5
43d018f9f2dc42579b044b3f7d78d993
-
SHA1
3aa8fb2c79cef3148d0f14d91099f94ed29423c0
-
SHA256
422c10b538f00c846f2f3d142e00587e21b2e29f1a633c25db9166cf52f976fd
-
SHA512
7e872e1ca328e1e1e01694878e8f29fb6c0eb8094a8b4791ea296f392cd76202dab12c8eb523afa222a48f14649e188ce478bd83f0ef00a51b687058ece52688
-
SSDEEP
12288:YJLATQ8LfCSdEWvwGfJLT0SEqPI1Ic/fhGMUFmvZj8nsqiXGMaUys7:zVVdEWv5dV5yIcoLy18sDGLUx7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43d018f9f2dc42579b044b3f7d78d993_JaffaCakes118
Files
-
43d018f9f2dc42579b044b3f7d78d993_JaffaCakes118.exe windows:4 windows x86 arch:x86
ee406ef829281bcf219e1414b9f48475
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WaitForSingleObject
CreateThread
VirtualFree
LoadLibraryA
VirtualAlloc
GetTickCount
GetProcAddress
GlobalFree
GlobalAlloc
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Sleep
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 644KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ