Static task
static1
Behavioral task
behavioral1
Sample
7801411401c4a9c5827629d0a1f9a045_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
7801411401c4a9c5827629d0a1f9a045_JaffaCakes118
-
Size
225KB
-
MD5
7801411401c4a9c5827629d0a1f9a045
-
SHA1
fb6d7f746ed30cd6f367dc4f0f55ac5da7f53dae
-
SHA256
6a8c85ff484156a372411db467179aa7708056329e21e837fad50fa2c5521685
-
SHA512
04da8c12b332a4fa7ba7d98fdfc30a3fb6fffbad91de6e0131a87b5f8631dcbd96f1007b84f562c65fbeaf777d40d0d7f0df38734f7be084ec18ce03ddda8060
-
SSDEEP
3072:MzU5gFmBYlPpBN9gFlrs9zQCoPAo1YVKINIuPfeOv4qO0:mU1SlBBNGbrs9zQXo5B3e4r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7801411401c4a9c5827629d0a1f9a045_JaffaCakes118
Files
-
7801411401c4a9c5827629d0a1f9a045_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e2967a86b032f9375d0e38df266bb95
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetLastError
SetConsoleCtrlHandler
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer
GetStringTypeA
GetStringTypeW
ReadFile
LCMapStringA
LCMapStringW
SetStdHandle
CloseHandle
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
CreateFileA
WriteConsoleA
Sections
.text Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yvtivxx Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE