Static task
static1
Behavioral task
behavioral1
Sample
837a9c80a51330d453f44bc08b6666cd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
837a9c80a51330d453f44bc08b6666cd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
837a9c80a51330d453f44bc08b6666cd_JaffaCakes118
-
Size
208KB
-
MD5
837a9c80a51330d453f44bc08b6666cd
-
SHA1
b6db0317d68040f2a201a15b8b2794d9798d1f9b
-
SHA256
02d73764a78398749db4f5c83f6e601373d3e648f9102e3837513c28c1d9b849
-
SHA512
961227b7a3344844bd69e8cace271a02e55862956bd4ddd37e0ce9b90cbab99e83a95f9d52221ae685ebdfb1a8f909bb73cc852d4abe901a7d0581bf9f2d44ad
-
SSDEEP
3072:/S5wflmQsvlxFJu0J9IcAKazMVlxS0PZbhPYhKa:/SRxLC+SxyPZbGP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 837a9c80a51330d453f44bc08b6666cd_JaffaCakes118
Files
-
837a9c80a51330d453f44bc08b6666cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
51ef0c056750bd1784d1b9bfd86c4da5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
LoadLibraryA
VirtualProtect
GetProcAddress
GetModuleHandleA
GetExitCodeThread
FlushFileBuffers
VirtualQuery
CreateEventA
OpenMutexA
VirtualLock
Sleep
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemInfo
user32
GetFocus
IsWindowEnabled
LoadCursorA
winscard
SCardForgetCardTypeA
psapi
EnumProcessModules
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ