Static task
static1
Behavioral task
behavioral1
Sample
7150a5e54996a3a611face40de5b65c9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7150a5e54996a3a611face40de5b65c9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7150a5e54996a3a611face40de5b65c9_JaffaCakes118
-
Size
64KB
-
MD5
7150a5e54996a3a611face40de5b65c9
-
SHA1
4ed4fcd89d6ffe7ef8001341492c808f91934c02
-
SHA256
94476d1ee0ad27d75f8b6b0822b1f6f57455c90bf59ff46ca21fee22e41c890e
-
SHA512
0019e08eb686ca0f19b396e4dc1eec0be6ff710a505f1d6ebc45ba547e444bd5c6184cfe73e140bb5f001c1b77fb534070cf4c3a21844e83e9080acc7545f59c
-
SSDEEP
1536:UOPli9FCN1VOjomaoJTilgc0BO8gPd5oivW:hNi9FC3VOjomaUFLg15oivW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7150a5e54996a3a611face40de5b65c9_JaffaCakes118
Files
-
7150a5e54996a3a611face40de5b65c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b3f4f7468320599eab085a2aca638b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
CreateProcessA
HeapAlloc
RaiseException
Sleep
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetLastError
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetProcAddress
GetModuleFileNameA
GetStringTypeA
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
LoadLibraryA
CloseHandle
GetStringTypeW
CreateFileA
user32
MessageBoxA
wsock32
select
htons
gethostbyname
ioctlsocket
bind
setsockopt
socket
listen
connect
send
recv
inet_ntoa
closesocket
WSAGetLastError
WSAStartup
WSACleanup
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE