Static task
static1
Behavioral task
behavioral1
Sample
628076bc69c8e40b96e5b9857a0fe0c4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
628076bc69c8e40b96e5b9857a0fe0c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
628076bc69c8e40b96e5b9857a0fe0c4_JaffaCakes118
-
Size
160KB
-
MD5
628076bc69c8e40b96e5b9857a0fe0c4
-
SHA1
ad838f7d713a62802b6c481afe491f95f4892993
-
SHA256
a343bc036d5b133c4b5bbeb4cf77d06465f454b82c6235f3d1f4ff5793a27c6a
-
SHA512
9f091656e99940140f763fcc6a29b8228480c06fd93af39c730d5a8c77bede30d608628d177bd6e27d05f994476896433d135b4ce9f41f068c5cff0ea740689e
-
SSDEEP
3072:0nsPWkehcM3W4IZzGusYWNq0xsHVoQUuqMoF:bPW1qM3WXZXs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 628076bc69c8e40b96e5b9857a0fe0c4_JaffaCakes118
Files
-
628076bc69c8e40b96e5b9857a0fe0c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b221742412d9f7e17c6feee508d47a4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
GetLastError
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
MoveFileA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetCurrentDirectoryA
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetTimeZoneInformation
SetConsoleCtrlHandler
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileAttributesA
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ