Static task
static1
Behavioral task
behavioral1
Sample
84763f36e229b95009698567f4a870c1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
84763f36e229b95009698567f4a870c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84763f36e229b95009698567f4a870c1_JaffaCakes118
-
Size
112KB
-
MD5
84763f36e229b95009698567f4a870c1
-
SHA1
caa9e15d00926969ba6f12fa243366104a16b9c3
-
SHA256
14ce8464f13b735ed359c74cedf730fa7725f679fd29a0f58dcfa0a9a5f3390f
-
SHA512
0093f3eaf3c0122db4a5ef989c8bd6b4d8b9aacd3e7642ccada89ee79b7a1d16e24b860dabfbfb916a852681eadc7eb42719ff2eff2f6e5e7c8299068201f27d
-
SSDEEP
3072:iHApbypHgPSEXG5V7QXFM/+JogTJltZrpRB:bypHgK5oF8+vthp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84763f36e229b95009698567f4a870c1_JaffaCakes118
Files
-
84763f36e229b95009698567f4a870c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e702bee2486c5094d1d15d64906177d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetProcAddress
GetModuleHandleA
GetVersion
lstrcmpiA
LoadLibraryA
WriteFile
CloseHandle
GetFileSize
VirtualProtect
GetStringTypeA
LCMapStringW
LCMapStringA
LoadResource
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
TlsAlloc
SetFilePointer
VirtualAlloc
DeviceIoControl
MultiByteToWideChar
GetEnvironmentStrings
WideCharToMultiByte
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
user32
EndPaint
wsprintfA
GetClientRect
MessageBoxA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DefWindowProcA
FindWindowA
BeginPaint
DrawTextA
gdi32
CreateBitmap
advapi32
RegCloseKey
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BSS Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ