Static task
static1
Behavioral task
behavioral1
Sample
8487be0605447f40417cdad51f7a3416_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8487be0605447f40417cdad51f7a3416_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8487be0605447f40417cdad51f7a3416_JaffaCakes118
-
Size
168KB
-
MD5
8487be0605447f40417cdad51f7a3416
-
SHA1
414ae7e42dd989ec7640e3675650a51e7db7c4a2
-
SHA256
6a705ccfc87ca11e13ef8fa7882c47954596d377240f77395764fc77e277d35d
-
SHA512
4051e1ae44eb623a2b5fd3fd4f4c0375fa79a436d6e0fffda0d838d24d0d54a403c4cacb195eaaaae84e1dd2c3aefec5e9cfb00c5591fd31b5d4fbb94beca36a
-
SSDEEP
3072:tyj1699lMxz3Qpyx0tX0YUdc3JN/RA/HlsdxgV/gGvu6a5h:tyBE4GX0B8rRA/Hx/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8487be0605447f40417cdad51f7a3416_JaffaCakes118
Files
-
8487be0605447f40417cdad51f7a3416_JaffaCakes118.exe windows:4 windows x86 arch:x86
083ef1989ba24296d3de7816971756a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseSemaphore
OpenMutexA
VirtualFree
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
GetModuleHandleA
ResetEvent
GetLastError
HeapUnlock
VirtualAllocEx
GetCommandLineA
VirtualFreeEx
LocalLock
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
HeapCreate
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
HeapFree
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
LCMapStringA
VirtualQuery
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemInfo
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersionExA
GetStartupInfoA
user32
GetWindowRect
SetCursorPos
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
GetTopWindow
GetLastActivePopup
LoadAcceleratorsA
PostMessageA
IsChild
LoadCursorA
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
SetTimer
ReleaseDC
CreateIcon
IsIconic
gdi32
CreateBrushIndirect
shell32
SHGetMalloc
ord195
psapi
EnumProcessModules
msvfw32
DrawDibEnd
DrawDibDraw
DrawDibRealize
gdiplus
GdiplusStartup
GdiplusShutdown
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sec Size: 4KB - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsec Size: 4KB - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsec Size: 4KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ