Static task
static1
Behavioral task
behavioral1
Sample
8211396de1b8388d9cbb4fe8e7f46a7d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8211396de1b8388d9cbb4fe8e7f46a7d_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8211396de1b8388d9cbb4fe8e7f46a7d_JaffaCakes118
-
Size
156KB
-
MD5
8211396de1b8388d9cbb4fe8e7f46a7d
-
SHA1
e7df918dd79b5551674516c21db8f9832b759cdd
-
SHA256
d2ac081493f976d9f22773133d4ac0331f8b89d16c8c77081b40c1a4df652332
-
SHA512
6f1a4d5b77bb40d8d3c776c21761c93d95bfadd5fd86100fa74c42a87bf28fa9fa624e6396c4d3fa00920667237d73b0eef7a6cd0bb3aded9c809ca6d1899216
-
SSDEEP
1536:ST6G4+MyndAptXW8F2kZxwb0w4oWupoaIT:86p+Rn+LjF2yxwb3poaW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8211396de1b8388d9cbb4fe8e7f46a7d_JaffaCakes118
Files
-
8211396de1b8388d9cbb4fe8e7f46a7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a3e6c36ec204c871b33367ea33982f49
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
GetLastError
FindFirstFileA
SetFileAttributesA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
CloseHandle
user32
LoadIconA
SendMessageA
GetDlgItem
SetWindowTextA
EnableWindow
MessageBoxA
DialogBoxParamA
EndDialog
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Sections
.text Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ