Static task
static1
Behavioral task
behavioral1
Sample
85235f375cee926e31a2f44439947ebd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
85235f375cee926e31a2f44439947ebd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85235f375cee926e31a2f44439947ebd_JaffaCakes118
-
Size
43KB
-
MD5
85235f375cee926e31a2f44439947ebd
-
SHA1
57b7ab9807d5d503a001d110a62f48b6ef9f8787
-
SHA256
16e06c194b09ebba7af048dd5956f657118355dd512f3fa9e44c5eef8591ea0e
-
SHA512
fd8c9a2eccd66fd3b885b02041bc0c5c0284451d828182cf91e79f450114f25f6b6b301dae6d600f66aec5fccb42a853be022e82230447f726f34681762a3d94
-
SSDEEP
768:MDPsWfeMxZ6SE2CONRfCHUFvvoQHuVRwx/BP1B8arTTbT1dTM4:uP9xJoJVRwFBP1BprT3TZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85235f375cee926e31a2f44439947ebd_JaffaCakes118
Files
-
85235f375cee926e31a2f44439947ebd_JaffaCakes118.exe windows:4 windows x86 arch:x86
a8a55872ee6a8155585cce5efbd98c2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
lstrlenW
OpenProcess
lstrlenA
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
CreateRemoteThread
WriteFile
CreateFileA
GetModuleFileNameA
GetWindowsDirectoryA
ReadFile
SetFilePointer
GetFileSize
GetSystemTime
GetStringTypeA
LCMapStringW
WaitForSingleObject
VirtualFreeEx
GetSystemDirectoryA
CloseHandle
LCMapStringA
MultiByteToWideChar
GetStringTypeW
LoadLibraryA
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
user32
wsprintfW
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
ole32
StringFromGUID2
CoCreateGuid
CoInitialize
Sections
Size: 14KB - Virtual size: 14KB
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 25KB
IMAGE_SCN_MEM_WRITE
Size: 257B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE