Static task
static1
Behavioral task
behavioral1
Sample
4c0ea68f582c27727086d55ed567b743_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c0ea68f582c27727086d55ed567b743_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c0ea68f582c27727086d55ed567b743_JaffaCakes118
-
Size
41KB
-
MD5
4c0ea68f582c27727086d55ed567b743
-
SHA1
98bc6ae89c447738ff4e0c76cfcd8e01b9e76f3e
-
SHA256
2f6d0a51a4fa7ee6231ff0e910ebee2681279138fbb613abe1e32041aa556646
-
SHA512
9978f4f8757c384743dbb012d0abc9f3c6ff65a496008c1d9e5e1862d3fd6cbe016a214024a85f9c77c7fac0cb875cdf1b75ea4b59357a6e5576c232042e845f
-
SSDEEP
768:9x9ZnlLH7mMYmMsu1PEhZ5e3UNz4Z/jf+:93Znl3mjsOPwP6Z/y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c0ea68f582c27727086d55ed567b743_JaffaCakes118
Files
-
4c0ea68f582c27727086d55ed567b743_JaffaCakes118.exe windows:4 windows x86 arch:x86
df74c8f289e675a5632bbbb73ae73946
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadResource
FindResourceA
WinExec
GetTempPathA
GlobalAlloc
GetProcAddress
GetModuleHandleA
HeapFree
ReadFile
CreateFileA
GetProcessHeap
GetFileInformationByHandle
GetSystemDirectoryA
DuplicateHandle
GetCurrentProcess
LoadLibraryA
LocalFree
IsBadReadPtr
GetVersionExA
SizeofResource
WriteFile
CloseHandle
HeapAlloc
FreeResource
ExitProcess
TerminateProcess
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
advapi32
GetUserNameA
SetEntriesInAclA
SetSecurityInfo
GetSecurityInfo
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ