Static task
static1
Behavioral task
behavioral1
Sample
71b4029aa44f9fdfd14c4d340d32c735_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
71b4029aa44f9fdfd14c4d340d32c735_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71b4029aa44f9fdfd14c4d340d32c735_JaffaCakes118
-
Size
316KB
-
MD5
71b4029aa44f9fdfd14c4d340d32c735
-
SHA1
67921ea4c8eeb688e48b2e35aced018cb39646ce
-
SHA256
482cb18214db58c985abb23464dbc2b13b784e9f05a67bd26716bf701531b976
-
SHA512
2358438597e3754499bc69e36c60e63a0b421bb5fb658659e937ee9a71c310b1dc9ff171e3e1ab0c465335875975451e92f6b69c7f21080e7b91f0918f06dfc9
-
SSDEEP
6144:jTORedVvnJX3YL+FBe6CGGsPLkE3OJW4qH0:jf/vnJ46FBe6PLkaOFx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71b4029aa44f9fdfd14c4d340d32c735_JaffaCakes118
Files
-
71b4029aa44f9fdfd14c4d340d32c735_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ede871f504dee75b485f08c01cf3ea1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 28KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 212KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 48KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE