Static task
static1
Behavioral task
behavioral1
Sample
73a2765f4053c6198d4de46d5caaa614_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
73a2765f4053c6198d4de46d5caaa614_JaffaCakes118
-
Size
317KB
-
MD5
73a2765f4053c6198d4de46d5caaa614
-
SHA1
857c29ad92d8f57d10e335217d8bc390054396bf
-
SHA256
799a96590c08e73af0f0e1f2e8625bb933f8bee5802f24c1471342126175c8ae
-
SHA512
ab8ea93bcd0baa42be884c1649fda3658a7ed7dd636cd921916beb4aa9c8581e9d67d2e363075983ec6f58e0566865bbe1ea0075b03c69fe84b4ccca9ebac2d2
-
SSDEEP
6144:8jPTHZiFWIAl8Off93wwa/CqWQbfYjdo6Rax:8jLHZic8O2Cq3bfYBoz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73a2765f4053c6198d4de46d5caaa614_JaffaCakes118
Files
-
73a2765f4053c6198d4de46d5caaa614_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d9239614bba522919217354a50ac3d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CloseHandle
ExitProcess
VirtualAlloc
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
WriteFile
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
GetProcAddress
HeapFree
GetLastError
GetTickCount
ReadFile
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
user32
DefWindowProcA
GetMessageA
TranslateMessage
PeekMessageA
SetCursorPos
ShowCursor
GetCursorPos
GetDC
UpdateWindow
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
gdi32
SetTextColor
GetStockObject
TextOutA
SetBkMode
ddraw
DirectDrawCreateEx
dsound
ord1
Sections
.text Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE