Static task
static1
Behavioral task
behavioral1
Sample
48a286ae94bfec0bd21851ddb02f29b8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48a286ae94bfec0bd21851ddb02f29b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48a286ae94bfec0bd21851ddb02f29b8_JaffaCakes118
-
Size
128KB
-
MD5
48a286ae94bfec0bd21851ddb02f29b8
-
SHA1
a407e835a4ce738c0e18740c1d9f3d45bdc84fab
-
SHA256
f8d27d57332d935e49b32dff2ca90beffd3f858df4082eb2b09a13e839156e94
-
SHA512
e45d8d008f08d45610621e00f2cb4a733aeb724682c6a91cebb47aa4dffaaa5f03f211a51c3f630a116ad3e3ca57901a697e77e8a54edea72131c7bc323d084b
-
SSDEEP
3072:uD8chABhQGL1OK/nNojHfDqPyNm1TNAJjwzSyvL3JZ:udhABhQGhxGWqNm1pyjOh3JZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48a286ae94bfec0bd21851ddb02f29b8_JaffaCakes118
Files
-
48a286ae94bfec0bd21851ddb02f29b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b4021b3ddc64ade3d3847c0d8af24d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WaitForSingleObject
Sleep
CreateDirectoryA
GetTempPathA
GetModuleFileNameA
LCMapStringA
SetEndOfFile
LoadLibraryA
GetOEMCP
GetLastError
DeleteFileA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
WriteFile
ReadFile
GetProcAddress
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
CreateFileA
GetCPInfo
GetACP
LCMapStringW
shell32
ShellExecuteExA
winmm
timeGetTime
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ