Static task
static1
Behavioral task
behavioral1
Sample
774f1637beb7d3eddbd871d767fb4198_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
774f1637beb7d3eddbd871d767fb4198_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
774f1637beb7d3eddbd871d767fb4198_JaffaCakes118
-
Size
204KB
-
MD5
774f1637beb7d3eddbd871d767fb4198
-
SHA1
e339caea5407c25e8f0786a5b2c7ea51fcbbf94d
-
SHA256
ae09bdf2538b4ca2284f2c2c8a309260626ed393080a444a6708828a78a55cc7
-
SHA512
724f2066dbf8cb2439f890f6715e58f728b776274ed21195fddb8e39ec073cfdd4908a7f69f323a6f2e6a594d23df7b056cb3a89c39d6d96a4cf9e7b621b8be0
-
SSDEEP
3072:RmlnCH0TBlWOsM2jGES82nRr0+xPo5Ent3Z63JkgMmKbIU8:klGOsM2GE690+OetkJPbK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 774f1637beb7d3eddbd871d767fb4198_JaffaCakes118
Files
-
774f1637beb7d3eddbd871d767fb4198_JaffaCakes118.exe windows:4 windows x86 arch:x86
83dd259a5910317362dde7ac37cfb9ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
LocalReAlloc
CreateEventA
SuspendThread
IsBadCodePtr
GetProcAddress
LoadLibraryA
ResetEvent
VirtualFree
VirtualProtect
VirtualAlloc
LCMapStringW
LCMapStringA
HeapSize
SetFilePointer
ReadFile
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetModuleHandleA
Sleep
GetACP
FlushFileBuffers
SetStdHandle
HeapReAlloc
GetSystemInfo
HeapAlloc
MultiByteToWideChar
ExitProcess
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapFree
GetLastError
CloseHandle
InterlockedExchange
VirtualQuery
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
GetLocaleInfoA
user32
LoadBitmapA
GetParent
GetDesktopWindow
MessageBoxA
DestroyWindow
PostMessageA
EnableWindow
GetWindow
gdi32
SelectObject
shell32
DuplicateIcon
ole32
CoUninitialize
psapi
GetModuleInformation
msvfw32
DrawDibBegin
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ