Static task
static1
Behavioral task
behavioral1
Sample
86a169c2a71da901982513774fa0c02b_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
86a169c2a71da901982513774fa0c02b_JaffaCakes118
-
Size
548KB
-
MD5
86a169c2a71da901982513774fa0c02b
-
SHA1
e1d6e5b3a762e80f1bec26420001c268a3e13763
-
SHA256
29acb3c5f72743d2e6518ec3f73cc4d7985431b409741f28b809935ac20c22ef
-
SHA512
a7d22e83e9889e6ad027088c60748d177e028c5a9d3d2241ce4a9ad14ea8faa0d879fbdb0269ad9841061512ec477182bce36d8c36e29e418be885477740a40f
-
SSDEEP
6144:IFyDPl3hid5ZCYaW7Jd5FuFIwruXUm+MHmyiSx5Tmdgn:P3hidj6W7rruF7ChHKc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86a169c2a71da901982513774fa0c02b_JaffaCakes118
Files
-
86a169c2a71da901982513774fa0c02b_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc1e5c096f9b168f1e5ec3144ca6bd74
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
lstrcpyA
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
MultiByteToWideChar
GetModuleFileNameA
FreeEnvironmentStringsA
LCMapStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
lstrlenA
UnhandledExceptionFilter
SetStdHandle
CloseHandle
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
HeapCreate
WriteFile
HeapAlloc
SetFilePointer
HeapFree
FlushFileBuffers
user32
LoadStringA
wsprintfA
MessageBoxA
ole32
OleInitialize
OleUninitialize
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.2rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 206KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE