Static task
static1
Behavioral task
behavioral1
Sample
7791c6314afad71c9cdafec8a1025d8d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7791c6314afad71c9cdafec8a1025d8d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7791c6314afad71c9cdafec8a1025d8d_JaffaCakes118
-
Size
392KB
-
MD5
7791c6314afad71c9cdafec8a1025d8d
-
SHA1
450d456fb77043f252160fb53d0f53d2c9f88b0c
-
SHA256
9dd81662527e61fd5327cf4fab5cf45a43e42821a3ec29dc7f66ac38440f7b55
-
SHA512
91992fce9419f88efd51d107215f619c7892548124afac9ced14bf36569708da87e3029ed26acc8830079cdd0bd7f96b3689ddb5b96fb0cbb222fa613d4cdb38
-
SSDEEP
12288:Lr8mi+OQwrlULCS4cTqtMFWEacV3/sHEQ:/SrQIueSVqiFfaU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7791c6314afad71c9cdafec8a1025d8d_JaffaCakes118
Files
-
7791c6314afad71c9cdafec8a1025d8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a319f04aaef00b8f6e4e72e9a8359ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
ExpandEnvironmentStringsW
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrlenW
ExitProcess
UnhandledExceptionFilter
FindNextFileW
VirtualProtect
QueryPerformanceCounter
GetCommandLineA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersionExA
VirtualQuery
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetSystemInfo
advapi32
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 356KB - Virtual size: 707KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ