Static task
static1
Behavioral task
behavioral1
Sample
7264d045037381ddd4247f7d0e618321_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7264d045037381ddd4247f7d0e618321_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7264d045037381ddd4247f7d0e618321_JaffaCakes118
-
Size
443KB
-
MD5
7264d045037381ddd4247f7d0e618321
-
SHA1
2df52c569775108921ec3bc97319383eeebedeae
-
SHA256
a69b7aeb2b4ea153900600061c4897007d09789d4f4436e93f7a45f4862f78f9
-
SHA512
579b3ef0d0ffb747ea40a8a1759b9ba73d1ecc8cb50ee8e4c30ab62e06266140d6045cdac7b5222accd960e06d53a3809413acb847e1f4e3694c86a9f9cef1fc
-
SSDEEP
6144:/YLwViVWneUFMG/JiaQdQX4/rThEafBJlgOeQ8XcRiC9o5eSAn9G3Hp4GosIOsVk:ALI2U4ashrThrZbkxUSbHK7sIOjj/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7264d045037381ddd4247f7d0e618321_JaffaCakes118
Files
-
7264d045037381ddd4247f7d0e618321_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b00185295c8dad748de15da653fe1b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
_CIsinh
longjmp
fopen
_setjmp3
fclose
malloc
free
strlen
exit
__p__iob
fprintf
sprintf
fwrite
fflush
ferror
getenv
sscanf
memmove
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
DeleteFileA
HeapFree
TlsGetValue
HeapAlloc
TlsSetValue
TlsAlloc
HeapReAlloc
WaitForMultipleObjects
EnterCriticalSection
CloseHandle
LeaveCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.. Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
..aer Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ