Static task
static1
Behavioral task
behavioral1
Sample
834ee32f8700eb9f3836269bebd4d704_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
834ee32f8700eb9f3836269bebd4d704_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
834ee32f8700eb9f3836269bebd4d704_JaffaCakes118
-
Size
144KB
-
MD5
834ee32f8700eb9f3836269bebd4d704
-
SHA1
efeab90387e871893eeb9fea46ab330c38c1e75f
-
SHA256
a1a5f76346bd2b2674a9d6411b8ec201d650c35ffbc064a749f471e4619100f5
-
SHA512
5ef655d57b0ae6adc7023f00541a8b503a0a5107e5c5e63a53b0cb69eed0a1ab7546aa88e519cf2c992555e6a128a998abfd7bd37cec981d5611146f38c14ba1
-
SSDEEP
1536:jyJsqcou1ZeZ/2NktQxfFKkGv3U1KLDlpG:jCsqcD1+2NktQLLGvuKHlk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 834ee32f8700eb9f3836269bebd4d704_JaffaCakes118
Files
-
834ee32f8700eb9f3836269bebd4d704_JaffaCakes118.exe windows:4 windows x86 arch:x86
a331033b1e5af426e01df9230c71676e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
GetModuleHandleA
HeapAlloc
HeapFree
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CloseHandle
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nrdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE