Static task
static1
Behavioral task
behavioral1
Sample
768787eb7fc52cbf1c676e8ae3feb08e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
768787eb7fc52cbf1c676e8ae3feb08e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
768787eb7fc52cbf1c676e8ae3feb08e_JaffaCakes118
-
Size
11.7MB
-
MD5
768787eb7fc52cbf1c676e8ae3feb08e
-
SHA1
7c27d8321a067c88975cc7513fbb6d1701c9acd6
-
SHA256
a93d8eb10877992530152cf35ade12b57a880e7a62c3d4fe5748ba42ed25aae9
-
SHA512
fa1db9f787122f91e89a7e948db7a93ad313e5e1915505a885ce0d7b6e68950dc1f045b0edd251ffb6bd38445810b81a2bb78e57580079cffa23003e48ccb653
-
SSDEEP
98304:Eb5c0eb5cLb5c0eb5cmb5c0eb5cVb5c0eb5cmb5c0eb5c8b5c0eb5cmb5c0eb5cv:R222L2A2L2Z2L2A2L222L2A2L2I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 768787eb7fc52cbf1c676e8ae3feb08e_JaffaCakes118
Files
-
768787eb7fc52cbf1c676e8ae3feb08e_JaffaCakes118.exe windows:5 windows x86 arch:x86
b2c87e30ac29fd4e3024b6df9473add6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
lstrlen
GetUserDefaultLangID
SetThreadPriority
OpenMutexA
GetCPInfo
ReleaseSemaphore
SetFilePointer
GlobalAlloc
InterlockedIncrement
lstrcpynW
DeleteCriticalSection
GetCurrentProcessId
WriteFile
VirtualFree
CreateSemaphoreA
lstrcpynA
lstrcpyn
CreateDirectoryA
CompareStringW
lstrlenW
ResetEvent
SetEndOfFile
CreateThread
FreeLibrary
LeaveCriticalSection
UnmapViewOfFile
GetFileSize
GetEnvironmentStringsA
FindFirstFileA
LCMapStringW
GlobalFindAtomW
GetProcAddress
CloseHandle
LoadLibraryW
SetEvent
OutputDebugStringA
CreateFileA
MapViewOfFile
ReadFileEx
OpenSemaphoreA
GetLastError
RemoveDirectoryA
lstrcmpA
lstrlenA
WaitForSingleObjectEx
WriteFileEx
GetDiskFreeSpaceA
GetTickCount
EnterCriticalSection
GetModuleFileNameA
GetFileAttributesA
ReadFile
GetSystemDefaultLangID
FindClose
InterlockedDecrement
GetSystemInfo
GlobalFree
OpenEventA
lstrcpyA
FindNextFileA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 474KB - Virtual size: 473KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ