Static task
static1
Behavioral task
behavioral1
Sample
74a3336304ba6a87429ea05a0588db61_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
74a3336304ba6a87429ea05a0588db61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74a3336304ba6a87429ea05a0588db61_JaffaCakes118
-
Size
133KB
-
MD5
74a3336304ba6a87429ea05a0588db61
-
SHA1
bb33bcf866ce86cecab0f6f7c1e39e2f7528bdd8
-
SHA256
e2741e40e3f89091cd79d2d68fc5d2971260df1f11fc9ad48aa4b13445536e33
-
SHA512
20d435d5c3bcfafca71924f082d9c470672f776ecc21a2d97d8dcc4edce71e2d2533c1535546b86ed76db3d13e547f1a1315a7de65d26ea14eb47c1759302ff0
-
SSDEEP
3072:rq9dt3LZzs3Gcn2pqMDG5PezyhEJrPB3N1PxBmRI:rUmGrpqywezJZIRI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74a3336304ba6a87429ea05a0588db61_JaffaCakes118
Files
-
74a3336304ba6a87429ea05a0588db61_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f8d68df80bbbd9aa0625249cb00abf7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
QueryDosDeviceA
CreateFileA
CloseHandle
GetCurrentProcess
GlobalAlloc
GlobalFree
GetDriveTypeA
OutputDebugStringA
FreeLibrary
LoadLibraryA
GetVersionExA
GetModuleHandleA
GetProcAddress
GetLastError
HeapAlloc
HeapFree
GetCommandLineA
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
advapi32
OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
AllocateAndInitializeSid
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE