Static task
static1
Behavioral task
behavioral1
Sample
65171d1736e13b7c7ba8ab4d1d7b5694_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65171d1736e13b7c7ba8ab4d1d7b5694_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65171d1736e13b7c7ba8ab4d1d7b5694_JaffaCakes118
-
Size
183KB
-
MD5
65171d1736e13b7c7ba8ab4d1d7b5694
-
SHA1
2a670fe0e77d59d7ce124b6ffb8c04ded814c0de
-
SHA256
a6e8dd4aeaabc232d946d3d50e04f4069b43a319cef47a5fd6e98686abce8a85
-
SHA512
57d7e3187166ba4fd700ec5871bf1a93f79c6231b7c1b02493fd07002e579b7cfd49a0d040b254f5eb9663047ba53993097cb136911c961641981afa175cbc3f
-
SSDEEP
3072:3y8K1XMiHOxiyMMJxDmWKuT5iLMR2+q+T6HIVdC0jUiqJr8lM94Co/wZ5Oj1o2Ww:3l28FiybxGuT5nRrq+6YdC0j9qt8TR/B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65171d1736e13b7c7ba8ab4d1d7b5694_JaffaCakes118
Files
-
65171d1736e13b7c7ba8ab4d1d7b5694_JaffaCakes118.exe windows:4 windows x86 arch:x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 39KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 1KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 87KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 44KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE