Static task
static1
Behavioral task
behavioral1
Sample
6a2022a03a55c4e40bf5bd7086c456e5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a2022a03a55c4e40bf5bd7086c456e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a2022a03a55c4e40bf5bd7086c456e5_JaffaCakes118
-
Size
198KB
-
MD5
6a2022a03a55c4e40bf5bd7086c456e5
-
SHA1
c1a29caf59a3c7cc545677e1aa4b7b837295bbbb
-
SHA256
e23c5b1ac4f01aab19584688dca462885d70f5c53c0171a66e56eaa29d4122d3
-
SHA512
4c8ab7d8c35c85c7f9114fecc922e3c6834dea09c98bd2b65bf0aeac3956619629f2f3e64ae278a06596e6ca97a21554c09ca7983fa9488c2de9f9c68459d4fb
-
SSDEEP
3072:kN23fBIXgKDtmnB0mYCmHzX4pcQTz6RfuOXU1yGyalw8szX2hZK/:kN2vBIXgrnBIqSQTWRPPGXw8mXr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a2022a03a55c4e40bf5bd7086c456e5_JaffaCakes118
Files
-
6a2022a03a55c4e40bf5bd7086c456e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
c811baaa77d8a18422a7a29425832f21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
GetTickCount
GetProcAddress
GetLastError
HeapFree
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
MultiByteToWideChar
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers
user32
wvsprintfA
wsprintfA
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ