Static task
static1
Behavioral task
behavioral1
Sample
46dacb232b16cb09fd11ca23ffaef332_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46dacb232b16cb09fd11ca23ffaef332_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46dacb232b16cb09fd11ca23ffaef332_JaffaCakes118
-
Size
209KB
-
MD5
46dacb232b16cb09fd11ca23ffaef332
-
SHA1
04d66aac7cf6dcd2fb3523b73f1f0b03170f7134
-
SHA256
37b05cec96b4698e7b7c2284a8c03e3f6c27542817bdb3b1bed4ebb928498772
-
SHA512
596682d828e9897e09cd823ae75d1c5688b5d29c76f9716d02461fb6b91c4113def73bdd6a1fed43b5baa2956103665f572fbf3b0bce59640c108c9175c91336
-
SSDEEP
3072:EAaDMQ0Q0Uh0bkBGYgDuR6OsVskOKz4BpBG9Mf6blUD2stF11+vzL:ELwwGbDuR6zVJOKp9Mf2C3tF1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46dacb232b16cb09fd11ca23ffaef332_JaffaCakes118
Files
-
46dacb232b16cb09fd11ca23ffaef332_JaffaCakes118.exe windows:5 windows x86 arch:x86
6b74ac98868fa957d560bc83fc2d5043
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GlobalFree
GetLastError
FindResourceExA
GlobalAlloc
GetThreadContext
GetCurrentThread
GetModuleHandleA
GetProcAddress
LoadLibraryA
WaitForSingleObject
CreateThread
HeapFree
HeapAlloc
GetStartupInfoA
RaiseException
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ