Static task
static1
Behavioral task
behavioral1
Sample
78bd214f8a2d48a1268dceabc72e0f8d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
78bd214f8a2d48a1268dceabc72e0f8d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
78bd214f8a2d48a1268dceabc72e0f8d_JaffaCakes118
-
Size
1.3MB
-
MD5
78bd214f8a2d48a1268dceabc72e0f8d
-
SHA1
881455189b92fc939f4520d2413287a1ee3474b1
-
SHA256
a950736e4a817bf3ccef81045378c49e1921669a3e2e504e512309a84e9afbbe
-
SHA512
e7ff7223e64bb6bc3907c93362daab654833d27079ef9f8ac4cd59d4f19bf976b111ac956de6eb82ebee119e4e28e0d17108022f6c87f32f9e2f6ba4851f0807
-
SSDEEP
24576:3zeMVtqBOSZy05k2DgsTnh2KO6lHqS5aNMUuRKSa:KMVtWZyUDgKh2J6NaNdwa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78bd214f8a2d48a1268dceabc72e0f8d_JaffaCakes118
Files
-
78bd214f8a2d48a1268dceabc72e0f8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad5a40961057a89e6237a23c289bab76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
MultiByteToWideChar
Sleep
GetTempPathA
GetModuleHandleA
SetFileAttributesA
GetFileAttributesA
CreateProcessA
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
HeapFree
GetCurrentProcess
GetCommandLineA
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
LoadLibraryExA
RaiseException
FlushFileBuffers
SetStdHandle
IsBadCodePtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetFileType
GetStdHandle
HeapSize
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
LocalFree
SetFilePointer
CreateFileA
WriteFile
CloseHandle
WideCharToMultiByte
HeapAlloc
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetVersion
RtlUnwind
HeapReAlloc
oleaut32
VariantClear
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ