Static task
static1
Behavioral task
behavioral1
Sample
60499f810e5c273eb29f34240d17a0a6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60499f810e5c273eb29f34240d17a0a6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60499f810e5c273eb29f34240d17a0a6_JaffaCakes118
-
Size
540KB
-
MD5
60499f810e5c273eb29f34240d17a0a6
-
SHA1
3474d1e7da3dd1da5d27af17606d2635b3791263
-
SHA256
7d1d054e179b735d8deacebdece61c8c39e64774e3166abee5175f920a63969f
-
SHA512
531004b990a4b8145426ec3e0b1115a3b4fac5b89d20e8e21a8098f4e09d5601b9f01b0bf185fb9196adc38e68f2b915db9f6b3a77e440475050fbe2f3c811c0
-
SSDEEP
6144:1ac6Dx0qdJ3gb5DWWWL05IVLTWB5FbxsDVe7uV/YoYf8TVs3xs3WF/L:wlx0oNgbNWWWLf3NdxYo/Bs3xsmF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60499f810e5c273eb29f34240d17a0a6_JaffaCakes118
Files
-
60499f810e5c273eb29f34240d17a0a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
483447829c94d0e210e040442b9bcf51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalAlloc
lstrlenA
ExitProcess
WinExec
GetModuleFileNameA
Sleep
CloseHandle
CreateThread
GetTickCount
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetLastError
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
CreateFileA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
SetEndOfFile
ReadFile
GetStringTypeW
user32
FindWindowA
SendMessageA
wsprintfA
FindWindowExA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 480KB - Virtual size: 479KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ