Static task
static1
Behavioral task
behavioral1
Sample
658a701d7195f77d3527ca5224f9919c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
658a701d7195f77d3527ca5224f9919c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
658a701d7195f77d3527ca5224f9919c_JaffaCakes118
-
Size
348KB
-
MD5
658a701d7195f77d3527ca5224f9919c
-
SHA1
05a53dc0c9e7cc07321bc7cf4867f607c9202f2c
-
SHA256
a4fb9df9fb4aaca85d1818b7f93df308f696a025962479fd8a6c7cb2e5d00fed
-
SHA512
fc453ae891fc73d25b570b92bbb3d3ac0bd0e46339a5245ef6fab2292ecb7ae51423ee1944e6fd24e0262dfb0ad7e599873ba4e25bd22bc24a8c9da412c3e76c
-
SSDEEP
6144:raYlGmYBuMsv7hiqxYp9EcXXOadE9la66ome4Nm87z:rmmYwbNFeFdE996e4l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 658a701d7195f77d3527ca5224f9919c_JaffaCakes118
Files
-
658a701d7195f77d3527ca5224f9919c_JaffaCakes118.exe windows:4 windows x86 arch:x86
e598868ce99a23aaa1af5cb1aeac135d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
InitializeCriticalSection
FatalAppExitA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
IsBadWritePtr
FlushFileBuffers
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
CloseHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 272KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ