Static task
static1
Behavioral task
behavioral1
Sample
5ffabcb6812b941be41afc3f7332cb93_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ffabcb6812b941be41afc3f7332cb93_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ffabcb6812b941be41afc3f7332cb93_JaffaCakes118
-
Size
76KB
-
MD5
5ffabcb6812b941be41afc3f7332cb93
-
SHA1
be2134cdf951cbe1d32527bff982361b52410ee6
-
SHA256
fe1e82b728aa47978a9bbb412b947f2a35e0d3f0d85f7d8226c464dab26f186d
-
SHA512
69844bf9f5af4274ed25d6ef042d7bc8053cb9f6214e0afc437adc58e87524613016d03da6aa5d4b06c005f6f0da252b90f98a02762899ac67eddb6ff11bc79e
-
SSDEEP
1536:cRggREkFd2TctdYb4lndUTNAhym9fAW8o/ESKU8j:+ggRjFlYcld6yhyH45/8j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ffabcb6812b941be41afc3f7332cb93_JaffaCakes118
Files
-
5ffabcb6812b941be41afc3f7332cb93_JaffaCakes118.exe windows:4 windows x86 arch:x86
2355bd29486d8aafdb68f879256c607d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
LoadLibraryA
VirtualAlloc
lstrcatA
lstrcpynA
CloseHandle
ExpandEnvironmentStringsA
GetModuleHandleA
lstrcpyA
GetSystemTime
GetCommandLineA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetProcAddress
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
GetStringTypeW
user32
GetGuiResources
KillTimer
ole32
CoInitialize
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ