Static task
static1
Behavioral task
behavioral1
Sample
47d9ec1c5dfb5a7ba953ded8bff50ee0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47d9ec1c5dfb5a7ba953ded8bff50ee0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47d9ec1c5dfb5a7ba953ded8bff50ee0_JaffaCakes118
-
Size
32KB
-
MD5
47d9ec1c5dfb5a7ba953ded8bff50ee0
-
SHA1
1c98135de0523a47b50367f55f39468d2765523e
-
SHA256
1ad51ea05a2052af6bbd33560e39d35a434e2f2f3bd79e65b77c484f7c05d64a
-
SHA512
ab7693412f689c9a996a85b92cbc9e7026bc4c136098efc8128ad02f8e41349939446adc2464f1445f7379e0549545e5498b677a4fc26df7e6b2d988660ef3b0
-
SSDEEP
384:P5bcyymfwtX1vkHr5eohx0HAVjomlPyIvoHj9gSpyye544d7MrhkoDY:OlFtGLY+0HAVjez/CXd7ShkoD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47d9ec1c5dfb5a7ba953ded8bff50ee0_JaffaCakes118
Files
-
47d9ec1c5dfb5a7ba953ded8bff50ee0_JaffaCakes118.exe windows:4 windows x86 arch:x86
2fe5428548d8066f348ca5c38f70a9e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetEnvironmentVariableA
WriteFile
WritePrivateProfileStringA
CreateFileA
lstrcatA
lstrcpyA
CloseHandle
lstrcmpA
Sleep
GetPrivateProfileIntA
CreateDirectoryA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
SetEnvironmentVariableA
user32
GetAsyncKeyState
SetTimer
PeekMessageA
TranslateMessage
DispatchMessageA
GetForegroundWindow
GetWindowTextA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE