Static task
static1
Behavioral task
behavioral1
Sample
824c8063b3b21617f593a79a459fbfa7_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
824c8063b3b21617f593a79a459fbfa7_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
824c8063b3b21617f593a79a459fbfa7_JaffaCakes118
-
Size
186KB
-
MD5
824c8063b3b21617f593a79a459fbfa7
-
SHA1
f5675246647f835151b2c9913423415585a09cc0
-
SHA256
1c619f13813db8884e2bb1fe4cd50b3c545434a1fecf4ef8a685503c63ae2cce
-
SHA512
ad5e50e6e022ac31dde26334b2b4a4d30df082e67c948549a6ffa16962b2b889c566d01b6d3322d40e0afe3a2dbd3ae3e7185878c982823240196fb84fc17f5b
-
SSDEEP
3072:Zpn0qBLuS7FLCjAlJF60pRdJDUGqsjWIn9joQLUZiTaFM8jHZjJ/:rlBLuSNlJF6KksWa5oQwaaW8P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 824c8063b3b21617f593a79a459fbfa7_JaffaCakes118
Files
-
824c8063b3b21617f593a79a459fbfa7_JaffaCakes118.exe windows:4 windows x86 arch:x86
4bbf00470be7bafe4698d3b35c055e2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetFileAttributesA
CloseHandle
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileTime
CreateFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetLastError
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetFileType
ReadFile
WriteFile
SetFilePointer
DeleteFileA
FindClose
FileTimeToSystemTime
FindFirstFileA
CreateDirectoryA
GetCurrentDirectoryA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
GetDriveTypeA
GetStringTypeA
WideCharToMultiByte
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetProcAddress
GetModuleHandleA
SetEndOfFile
SetHandleCount
GetStdHandle
GetStartupInfoA
SetStdHandle
GetFullPathNameA
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
LoadLibraryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bkav.plp Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE