Static task
static1
Behavioral task
behavioral1
Sample
8500715813214f32111ed96b07ba261d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8500715813214f32111ed96b07ba261d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8500715813214f32111ed96b07ba261d_JaffaCakes118
-
Size
168KB
-
MD5
8500715813214f32111ed96b07ba261d
-
SHA1
67e4d4c69eca054afff8490ed1abbc2ecdfdd8fc
-
SHA256
79b12fc5b075536e7a7787bf00fc65d94a910c924150f27233d118265adbdc19
-
SHA512
17ed5d8fb034e8449a1c945dec5e7b745285e8276d2574f9e0a522207e06377fedbccf42ebd033f8dcc01c73b36fc6118df11aaa584041d93dde760234a6ae54
-
SSDEEP
3072:9WD56oFAQetbYsnLy3JvGEh55D7w6DdKcY4DfkwD3THEOHXD:AD5HAvYsnLy3J13DsH4DfkwD35D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8500715813214f32111ed96b07ba261d_JaffaCakes118
Files
-
8500715813214f32111ed96b07ba261d_JaffaCakes118.exe windows:4 windows x86 arch:x86
cb853c210dff5b91ea91f24cc2f2f90c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcAddress
LoadLibraryA
lstrcatA
VirtualAlloc
Sleep
GetModuleHandleA
CloseHandle
lstrcmpiA
CreateToolhelp32Snapshot
ExitProcess
ReadFile
SetFilePointer
CreateFileA
FreeResource
WriteFile
lstrlenA
SizeofResource
LoadResource
lstrcpyA
GetTickCount
SetLastError
DeleteFileA
GetLastError
MoveFileA
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
WinExec
GetFileAttributesA
CreateThread
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
CreateDirectoryA
GetCurrentThreadId
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
HeapReAlloc
RtlUnwind
GetStartupInfoA
GetVersion
HeapFree
VirtualFree
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ