Static task
static1
Behavioral task
behavioral1
Sample
66c21ee0ac6c698776673f729ba63964_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
66c21ee0ac6c698776673f729ba63964_JaffaCakes118
-
Size
283KB
-
MD5
66c21ee0ac6c698776673f729ba63964
-
SHA1
c714d9636d44f9ee96fb0f0bad20602c6d1c9ec0
-
SHA256
d0695842f64addb935807d4f22cf390f78568a180fed613f2771e590276238d9
-
SHA512
ebb77b0861e8556cb1d9027dd3dfc1a7b2d24ef33bf8de9151eac60a8b2d890244759ea6c8b897a4f2961b2aaaf408c9bb5b935d6d37979d5d7e38aa676f3d41
-
SSDEEP
6144:131qVflBj0mzQHiqaC4xlVy9TQKDQlwdiVJteR/WX5ZnnvwlPr6Lbpb7wOaV9:1ACaCG5h2AJt7jnolT6Lt7WV9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66c21ee0ac6c698776673f729ba63964_JaffaCakes118
Files
-
66c21ee0ac6c698776673f729ba63964_JaffaCakes118.exe windows:4 windows x86 arch:x86
12dec5493f54f6c29aa980964264fa5b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetCPInfo
GetDiskFreeSpaceA
AddAtomA
SetUnhandledExceptionFilter
InitializeCriticalSection
FreeEnvironmentStringsW
CloseHandle
UnhandledExceptionFilter
Sleep
WideCharToMultiByte
GetEnvironmentStringsW
lstrcpynA
MultiByteToWideChar
CreateFileA
EnterCriticalSection
GetProcAddress
SetFilePointer
GetFullPathNameA
GetTickCount
SetStdHandle
GetStringTypeW
GetStringTypeA
EnumResourceNamesW
lstrcpyA
GetThreadLocale
WriteFile
lstrcatA
GetLastError
IsBadReadPtr
GetModuleHandleA
IsBadCodePtr
VirtualProtect
lstrlenW
FindFirstFileA
lstrlenA
GetCurrentThreadId
lstrcmpiA
lstrcmpA
GetStartupInfoA
GetFileAttributesA
LCMapStringW
LoadLibraryA
LCMapStringA
MulDiv
ReadFile
GetEnvironmentStrings
LeaveCriticalSection
GetOEMCP
FreeLibrary
FlushFileBuffers
DeleteCriticalSection
RaiseException
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 149KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ