Static task
static1
Behavioral task
behavioral1
Sample
46b6071d052a3f518232498f1935c376_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46b6071d052a3f518232498f1935c376_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46b6071d052a3f518232498f1935c376_JaffaCakes118
-
Size
2.1MB
-
MD5
46b6071d052a3f518232498f1935c376
-
SHA1
a8ab760151c81823964e759e2c53af3063c56512
-
SHA256
e39c95eb26d978940a2ed76e1379105a8add1eb6bcce514b8b7a24039cb9f778
-
SHA512
286056341cbe093128b257ee456ac1e07b0c4dc4a63d080c95552d2342393d8fc1032f471794fa1eaa726400c63a65c2d66662288edff7d9f9b7af8100e47fc9
-
SSDEEP
24576:5LtPhKiRPe0q9XAhFYxuP8pJjM78pK7wro0mxJglsK5w5vvUi6FpFsSyZggCqN1/:nqxAhF0HpJjM78pK7Ez5w1vUV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46b6071d052a3f518232498f1935c376_JaffaCakes118
Files
-
46b6071d052a3f518232498f1935c376_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d079795537d98c717b668924fbb3b0f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
HeapAlloc
ExitProcess
GetFileTime
CreateMutexW
GlobalFree
CreateMutexW
Sleep
ReadFile
FindNextVolumeA
CreateMutexA
HeapReAlloc
GetStdHandle
ReadFile
FindNextFileA
FindResourceW
CloseHandle
OpenFileMappingA
DeleteFileA
GetStdHandle
WriteFile
GetComputerNameA
HeapFree
GlobalAlloc
GlobalFree
CopyFileA
DeleteFileW
CloseHandle
WriteFile
FindNextVolumeA
GlobalAlloc
GetFileSize
DeleteFileA
FindFirstFileA
CreateFileA
GlobalFree
Sleep
GetCPInfo
HeapAlloc
GlobalFree
HeapFree
GlobalFree
GetCPInfo
HeapFree
GetFileTime
CreateFileA
GetFileTime
HeapFree
FindNextVolumeA
ReadFile
HeapAlloc
AddAtomA
FindResourceW
GetStdHandle
HeapReAlloc
GetStdHandle
WriteFile
HeapReAlloc
DeleteFileW
GlobalAlloc
ExitProcess
CreateMutexW
ReadFile
DeleteFileW
Sleep
OpenFileMappingA
GetComputerNameA
OpenFileMappingA
OpenFileMappingA
FindNextVolumeA
FindFirstFileA
HeapReAlloc
GetStdHandle
FindNextFileA
CreateMutexA
CreateDirectoryA
WriteFile
FindNextVolumeA
CopyFileA
GetComputerNameA
Sleep
OpenFileMappingA
AddAtomA
AddAtomA
GetFileSize
FindResourceA
GetFileTime
WriteFile
CreateDirectoryA
CloseHandle
FindResourceA
ReadFile
GlobalFree
FindResourceW
HeapFree
Sleep
CreateMutexW
GetFileTime
GetFileTime
HeapReAlloc
CreateMutexA
GlobalAlloc
HeapFree
ExitProcess
GlobalFree
AddAtomA
GlobalFree
CreateMutexA
GetFileTime
FindNextVolumeA
FindNextVolumeA
GetComputerNameA
GlobalAlloc
GlobalFree
FindNextVolumeA
HeapReAlloc
FindResourceA
HeapAlloc
Sleep
GetCPInfo
CreateDirectoryA
ExitProcess
FindFirstFileA
ReadFile
DeleteFileA
FindResourceW
CreateMutexA
GetFileSize
FindResourceW
FindNextFileA
CreateFileA
GetFileSize
GetStdHandle
FindNextFileA
CopyFileA
FindFirstFileA
CreateFileA
HeapReAlloc
DeleteFileW
FindNextFileA
ReadFile
ExitProcess
GlobalFree
DeleteFileA
FindNextFileA
CreateDirectoryA
ExitProcess
HeapReAlloc
GetFileTime
CreateMutexA
HeapFree
ReadFile
HeapAlloc
GlobalAlloc
DeleteFileW
CreateMutexW
CreateMutexW
CreateFileA
CopyFileA
CreateDirectoryA
HeapFree
ReadFile
GetStdHandle
FindResourceA
GlobalFree
Sleep
OpenFileMappingA
HeapAlloc
CopyFileA
FindResourceW
GetCPInfo
DeleteFileA
ExitProcess
Sleep
DeleteFileW
GetStdHandle
FindResourceA
CreateFileA
CreateMutexA
GetStdHandle
HeapFree
FindResourceW
GetFileSize
CreateDirectoryA
GlobalFree
GetStdHandle
CreateDirectoryA
GlobalFree
CloseHandle
Sleep
GetCPInfo
FindResourceW
AddAtomA
CreateMutexW
DeleteFileW
GlobalAlloc
GetComputerNameA
HeapReAlloc
GlobalFree
ReadFile
DeleteFileW
FindNextVolumeA
CreateMutexA
ReadFile
GetCPInfo
CreateDirectoryA
HeapAlloc
GetFileTime
FindResourceW
FindResourceW
GetCPInfo
DeleteFileW
Sleep
FindNextVolumeA
FindFirstFileA
AddAtomA
CopyFileA
CloseHandle
HeapFree
CreateMutexA
CreateDirectoryA
HeapReAlloc
HeapFree
HeapReAlloc
GlobalFree
ExitProcess
OpenFileMappingA
FindNextFileA
CloseHandle
CreateMutexA
CreateMutexW
GetCPInfo
GlobalAlloc
CreateMutexW
FindResourceA
GetFileTime
ReadFile
DeleteFileA
HeapAlloc
AddAtomA
GetComputerNameA
Sleep
FindResourceA
CopyFileA
CreateDirectoryA
FindNextVolumeA
GlobalFree
FindResourceW
FindNextVolumeA
FindNextFileA
HeapFree
HeapAlloc
FindFirstFileA
GetFileTime
CreateMutexW
AddAtomA
CreateFileA
CloseHandle
FindNextFileA
WriteFile
Sleep
DeleteFileA
HeapAlloc
GetFileSize
GlobalFree
FindFirstFileA
OpenFileMappingA
DeleteFileW
FindResourceA
HeapFree
ExitProcess
GlobalAlloc
ReadFile
AddAtomA
WriteFile
CreateFileA
ReadFile
GetStdHandle
DeleteFileW
CopyFileA
GetFileSize
CopyFileA
CloseHandle
HeapReAlloc
FindResourceA
CloseHandle
CreateMutexA
Sections
code Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.init Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 59B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ