Static task
static1
Behavioral task
behavioral1
Sample
62efd868379551c8e8e24d8cc7ff0daf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
62efd868379551c8e8e24d8cc7ff0daf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62efd868379551c8e8e24d8cc7ff0daf_JaffaCakes118
-
Size
89KB
-
MD5
62efd868379551c8e8e24d8cc7ff0daf
-
SHA1
6919ac8ce1a505277ae53a742a032b0e9033fce7
-
SHA256
87a797a5d55682edfb87e9434daba4cd75e7e59e0e4e8bda103e2e2b639c8fe8
-
SHA512
3b071be60bf44637d1d2c6cfe4faa52894c6a1e36522e3848860c9a7e5aac401a55caac71c9b18c1725d9cf50ee51e5654e6cdf349266f4633345a4814cb5a2f
-
SSDEEP
1536:zxWZ7F6dB03gnLLRRsjlqOLWz4+s8rDI1t328JYFE1ZXRcoN2l:lWhFO5SlqOabqFGFC2l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62efd868379551c8e8e24d8cc7ff0daf_JaffaCakes118
Files
-
62efd868379551c8e8e24d8cc7ff0daf_JaffaCakes118.exe windows:4 windows x86 arch:x86
de7cb2f12c4ee069e4250f32a0b2ba44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
GetThreadContext
GetTempPathA
GetModuleFileNameA
LoadLibraryA
ReadProcessMemory
CopyFileA
ExpandEnvironmentStringsA
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
CloseHandle
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE