Static task
static1
Behavioral task
behavioral1
Sample
6f53e3cb2cca4e9ba4af5fd49dfa4b79_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f53e3cb2cca4e9ba4af5fd49dfa4b79_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f53e3cb2cca4e9ba4af5fd49dfa4b79_JaffaCakes118
-
Size
167KB
-
MD5
6f53e3cb2cca4e9ba4af5fd49dfa4b79
-
SHA1
903a3ddd2cf5aa800ac4ad2413a9f43f230c2e20
-
SHA256
bd9290e8fce510366ceff8139c9e2ae84571c7ef3063bc62e76bc61b49a5ba59
-
SHA512
fba0670b8a01d075fb245f6e7b380df2cf71ca09f7bbaee759d9c78b8669d7f5452acadff5985fcd16bf06541efe6891d3e5899fd9579aca5a3052e38dbb4ab1
-
SSDEEP
3072:yjU8K+Izabwe8CKp1tWhToX8NR2fMyjcaC8q8daayVguv4B5Rn:b8K+bb8CKpoo+ofCt8dwQ5Rn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f53e3cb2cca4e9ba4af5fd49dfa4b79_JaffaCakes118
Files
-
6f53e3cb2cca4e9ba4af5fd49dfa4b79_JaffaCakes118.exe windows:4 windows x86 arch:x86
f77b294a46ed6f2467f714db4d1f0f41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetMalloc
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
kernel32
GetEnvironmentStringsW
WriteFile
TlsSetValue
GetCPInfoExW
InitializeCriticalSection
GetFileType
GetEnvironmentStrings
DeleteCriticalSection
InterlockedIncrement
FreeEnvironmentStringsW
GetTickCount
GetThreadLocale
FreeEnvironmentStringsA
WideCharToMultiByte
LeaveCriticalSection
GetOEMCP
EnumResourceTypesA
MultiByteToWideChar
EnterCriticalSection
GetVersionExA
GetStartupInfoA
InterlockedExchange
TlsGetValue
GetACP
SetHandleCount
lstrlenW
LoadLibraryW
GetCPInfo
HeapSize
GetLocaleInfoA
RaiseException
QueryPerformanceCounter
GetLastError
GetStdHandle
UnhandledExceptionFilter
GetCurrentProcessId
gdi32
DeleteObject
GetTextExtentPointA
GetTextMetricsA
SelectObject
GetDeviceCaps
CreateFontIndirectA
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ