Static task
static1
Behavioral task
behavioral1
Sample
67a5765b4b432c052a200560bbfc8a2b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67a5765b4b432c052a200560bbfc8a2b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67a5765b4b432c052a200560bbfc8a2b_JaffaCakes118
-
Size
20.1MB
-
MD5
67a5765b4b432c052a200560bbfc8a2b
-
SHA1
65435076a20638b05c0359ff01977e8d17ce89a2
-
SHA256
f6979e17b5b589635335c8387ae145c3b25f44771646b5ea38f3507336a07d2b
-
SHA512
2e4bfa9383e99acb185ccc3fa7153c91115a823896a8d5d7d15fbb32f0085619d520d7497ec83cea11284b323e4a704887284cf5a756c705a2a84d2b86aec5c9
-
SSDEEP
393216:Ct/9lBpnlwZjM0tHsWL0kmtEccc50W5Cb27HeI5X:CtzBRlwRMWok2Eccc50W5u2+8X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67a5765b4b432c052a200560bbfc8a2b_JaffaCakes118
Files
-
67a5765b4b432c052a200560bbfc8a2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
dee7b5f40b037e4608de07581f860d84
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
CreateProcessA
CloseHandle
WritePrivateProfileStringA
GetDiskFreeSpaceA
lstrlenA
SetCurrentDirectoryA
lstrcpyA
CreateDirectoryA
lstrcmpiA
_lread
_lwrite
_lclose
_lopen
_lcreat
_llseek
GetTempPathA
LoadLibraryA
HeapAlloc
GetModuleHandleA
GetStdHandle
GetFileType
WriteFile
GetOEMCP
GetACP
SetHandleCount
WideCharToMultiByte
GetEnvironmentStringsW
GetCPInfo
GetEnvironmentStrings
FreeEnvironmentStringsW
GetProcAddress
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
UnhandledExceptionFilter
RtlUnwind
FreeEnvironmentStringsA
TerminateProcess
ExitProcess
HeapFree
HeapCreate
GetVersion
GetCurrentProcess
user32
RegisterClassA
MessageBoxA
PostQuitMessage
DefWindowProcA
RegisterClassExA
DrawTextA
BeginPaint
GetClientRect
DispatchMessageA
PostMessageA
TranslateMessage
GetWindowRect
GetMessageA
GetDesktopWindow
UpdateWindow
CreateWindowExA
ShowWindow
LoadCursorA
LoadStringA
LoadIconA
wsprintfA
EndPaint
gdi32
SetBkMode
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 783B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ