Static task
static1
Behavioral task
behavioral1
Sample
8318e7b1766d674a0a58fd4e8322858e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8318e7b1766d674a0a58fd4e8322858e_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8318e7b1766d674a0a58fd4e8322858e_JaffaCakes118
-
Size
76KB
-
MD5
8318e7b1766d674a0a58fd4e8322858e
-
SHA1
81a7458b84168800ee6b237b43b015a002839752
-
SHA256
b05be396c6434e3a5cc2a4351d543e914179e25fe27500ce7af9843623f024f5
-
SHA512
5079c78238880dc5336591ee1627316b2462ace398b0ec53ba1429597da442eec5dc118df4d20837f928acabf470b0b063e601c8d3ffd3d24b5d18e647c080ef
-
SSDEEP
1536:r2VMYibt8oj57Yz/ewgSv4MSmGPQK6gfxo6n5CQRUkE2R:wHibt8oj50z/ewh4UGUgrn5LRU12R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8318e7b1766d674a0a58fd4e8322858e_JaffaCakes118
Files
-
8318e7b1766d674a0a58fd4e8322858e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f187f35469717cf5a92ed155fe2cf3c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualProtect
LockResource
LoadResource
SizeofResource
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetStringTypeW
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ