Static task
static1
Behavioral task
behavioral1
Sample
68be7d3f1e72f79425c6f331b38d70db_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68be7d3f1e72f79425c6f331b38d70db_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68be7d3f1e72f79425c6f331b38d70db_JaffaCakes118
-
Size
55KB
-
MD5
68be7d3f1e72f79425c6f331b38d70db
-
SHA1
5580471bc8e6e82068e6d4738205a63d5ffc0176
-
SHA256
43b403fc681290e4a510f5c2b148e25935b64b4c30332ea5e12cb25260ba560a
-
SHA512
e59d663a4d812d4575d83987cecb0f1be1c45bae862e451c3a15fa97ce507631e4a8e8e9dbf91f599e4845648b8b124a64fc72886f9578fc7bfbbd75dd577078
-
SSDEEP
768:ABH3XRjyfFUFXlooVh3Dl83+VWMZiK7bVKE3Htip/TWImIH6s73LDlFbTrGd+f9q:AdxeElVdNW07wEC/gIHdLDlFbT6e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68be7d3f1e72f79425c6f331b38d70db_JaffaCakes118
Files
-
68be7d3f1e72f79425c6f331b38d70db_JaffaCakes118.exe windows:4 windows x86 arch:x86
eda6d2a0617fa53c189464d65a125a1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
LCMapStringW
LCMapStringA
HeapAlloc
TlsAlloc
GetStringTypeA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeW
user32
ShowCursor
ScreenToClient
gdi32
CancelDC
GetMapMode
CombineTransform
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ