Static task
static1
Behavioral task
behavioral1
Sample
725eb4a4c7c875277af7aaade3897c15_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
725eb4a4c7c875277af7aaade3897c15_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
725eb4a4c7c875277af7aaade3897c15_JaffaCakes118
-
Size
79KB
-
MD5
725eb4a4c7c875277af7aaade3897c15
-
SHA1
d215ec310492231e699c0a11da3c6efae2f53f9f
-
SHA256
6e329748a2f5a5a9554b27eb9ac9be64d96bf592ed3e17b5dd9d34b50449ac84
-
SHA512
fef4b15f76bdc478feebad6cb209cb918819e6a2bcc4de4d1fea9df3519a385fb6281b5e3984296198d764beb21090ca74d5a00728e1f140750ed5f522f2fee8
-
SSDEEP
1536:T8YxJGlyXS/2pbfvoFwUvZ8e4lY6DhhfSPn2r1zgBEoo:AVyXW2tfVS8e4lXho/2r1zgBEoo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 725eb4a4c7c875277af7aaade3897c15_JaffaCakes118
Files
-
725eb4a4c7c875277af7aaade3897c15_JaffaCakes118.exe windows:4 windows x86 arch:x86
c791b8db48fe14388ba83d8bbf4dae45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
LoadResource
FindResourceW
GetCurrentProcessId
GetVersion
QueryPerformanceCounter
LockResource
GetModuleHandleA
DeviceIoControl
GetCPInfo
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStringTypeW
user32
LoadIconA
GetClientRect
EndDialog
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
LoadStringA
DefWindowProcA
FindWindowA
DialogBoxParamA
DestroyWindow
BeginPaint
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
wsprintfA
DrawTextA
GetSysColor
LoadCursorA
gdi32
TextOutA
Rectangle
CreateBitmap
advapi32
RegOpenKeyExA
RegCloseKey
RegSetValueExW
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEA Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ