Static task
static1
Behavioral task
behavioral1
Sample
70a99d296600f17f4aab637f644d97d7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
70a99d296600f17f4aab637f644d97d7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70a99d296600f17f4aab637f644d97d7_JaffaCakes118
-
Size
53KB
-
MD5
70a99d296600f17f4aab637f644d97d7
-
SHA1
000019012d03e9961332d95b92ffe90b7efaea6b
-
SHA256
18b267127fb5e05c24bd879c81a88ac0be9805113818861aec8f992190720cf3
-
SHA512
2e4b563e23cd8558b44401b1d15731506079f448cfe578073412aae16c93c2347cd2c2d809e84d6ee852c15f3218c99f059a949ed2797ef46a8c5df12ddfd6dc
-
SSDEEP
768:R8mzZ8Rvao9dByUkbqB1HihtPAWy6T6FL2GBErazW3O82nU5teP8GHpVQNo:qmV8pb9u1FyQKL2GBErazMj2nVEe0o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70a99d296600f17f4aab637f644d97d7_JaffaCakes118
Files
-
70a99d296600f17f4aab637f644d97d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
e9367ab1b2a21ff8e392e7ff8f87352b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetThreadContext
SuspendThread
Sleep
ResumeThread
OpenProcess
WriteProcessMemory
VirtualProtectEx
GetThreadContext
GetExitCodeThread
WaitForSingleObject
CreateRemoteThread
ExitProcess
ReadProcessMemory
GlobalAlloc
GetWindowsDirectoryA
GetTempPathA
CopyFileA
GetSystemDirectoryA
SetFileAttributesA
FindNextFileA
MoveFileA
TerminateProcess
CreateProcessA
SetCurrentDirectoryA
GetModuleFileNameA
LoadLibraryA
GlobalFree
GetModuleHandleA
DeleteFileA
FindFirstFileA
GetVersion
GetFileType
HeapDestroy
SetFilePointer
GetProcAddress
SetEndOfFile
RtlUnwind
GetStartupInfoA
GetCommandLineA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapFree
GetLastError
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW
HeapAlloc
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
FlushFileBuffers
ReadFile
VirtualAlloc
HeapReAlloc
SetStdHandle
GetACP
CreateFileA
GetCPInfo
GetOEMCP
user32
MessageBoxA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ