Static task
static1
Behavioral task
behavioral1
Sample
757bd74a3f35f1d8294f4c77c5230755_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
757bd74a3f35f1d8294f4c77c5230755_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
757bd74a3f35f1d8294f4c77c5230755_JaffaCakes118
-
Size
114KB
-
MD5
757bd74a3f35f1d8294f4c77c5230755
-
SHA1
d4a7f56b98dcb8a576c85abb93b9c3553a424c05
-
SHA256
f3f3d058fa2ae8c84fbf9e726c3b443969281b97dd6fc50743060b361d9d056f
-
SHA512
fcd9f1f49e24a8431136ff10735ee2e84784507b92effce6f7d91671fc806ec2074f04bc4833c0e253bc67f778843d641fc57f79e2fd8602c5711a0bdd232370
-
SSDEEP
768:Lp2/UmfpJJZFPJkvQ/2PDSC9Fq8vVTg8+1uDTk00C44hpx08vmjg:h6p1PEQePDlvdgfuD5RC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 757bd74a3f35f1d8294f4c77c5230755_JaffaCakes118
Files
-
757bd74a3f35f1d8294f4c77c5230755_JaffaCakes118.exe windows:1 windows x86 arch:x86
18fe6d238e2dc2718aa4661db9e711a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetSystemTimeAsFileTime
WaitForSingleObject
HeapAlloc
GetCommandLineA
GetVersionExA
GetStartupInfoW
LoadLibraryA
WriteFile
FormatMessageW
LeaveCriticalSection
GetVersionExA
CreateThread
ReadFile
InterlockedIncrement
ReadFile
MultiByteToWideChar
LoadLibraryA
CreateFileW
SetEvent
GetModuleHandleA
WaitForSingleObject
VirtualAlloc
CloseHandle
GetCommandLineA
Sections
.njfk Size: 102KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xhqv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.obat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.siig Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cnuo Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qsjo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.each Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xmdg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idcc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE