Static task
static1
Behavioral task
behavioral1
Sample
7130a94eeee38d5089924cbcefb4bf24_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7130a94eeee38d5089924cbcefb4bf24_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7130a94eeee38d5089924cbcefb4bf24_JaffaCakes118
-
Size
37KB
-
MD5
7130a94eeee38d5089924cbcefb4bf24
-
SHA1
4dbda7f2c750aca00b056957353356bd9f040d5f
-
SHA256
3db52687bcd87c3a029febb3d907192a6dabcd224f45db8cf4e165f488fb018c
-
SHA512
d79e67bb801dbe74682fe9f42beb1394fe2d987ef1a27d76ddee0d414974843286a43a037d882a8ce93f46fb21ca33abda9c7c8ef2a8ec493d7d72718ba8c5b5
-
SSDEEP
768:zRJPgio1LvRtg2B2W9a6w20hkv0+fSqdLKE457Pr:zjJoRp/0hO0+qqtWbr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7130a94eeee38d5089924cbcefb4bf24_JaffaCakes118
Files
-
7130a94eeee38d5089924cbcefb4bf24_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a48ca9845552fa7c6f1439bd63106e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
FreeLibrary
SetUnhandledExceptionFilter
CreateFileA
FlushFileBuffers
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
LoadLibraryA
GetProcAddress
GetStringTypeA
GetStringTypeW
SetEndOfFile
CompareStringA
GetLocalTime
ReadFile
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
CompareStringW
RtlUnwind
SetEnvironmentVariableA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapReAlloc
HeapSize
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
user32
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
DrawTextA
EndPaint
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
EndDialog
PostQuitMessage
Sections
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ