Static task
static1
Behavioral task
behavioral1
Sample
86cd978e1630bfd0ee5b60340dc8790e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
86cd978e1630bfd0ee5b60340dc8790e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86cd978e1630bfd0ee5b60340dc8790e_JaffaCakes118
-
Size
212KB
-
MD5
86cd978e1630bfd0ee5b60340dc8790e
-
SHA1
a012cc20c77c4a33c286ae3ae57a0f3d34a87b5c
-
SHA256
9435c8f01ad6f4bcbfcabcd4a7d2a4772ac6e6036a58de0f32fceca0eb87baac
-
SHA512
41fa25ed9c04e209c9950326134ca8ed89b0ea1bd91b9e4e29f2392d098aad5417ee564d1c83a972c284716f0c9e018aed4e863fd22796a18da7e242c4b91c98
-
SSDEEP
3072:eE7+E7iE7KDIf+VX05Pf/B8ecGZBvZjjs:hBdKcs0BnK02
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86cd978e1630bfd0ee5b60340dc8790e_JaffaCakes118
Files
-
86cd978e1630bfd0ee5b60340dc8790e_JaffaCakes118.exe windows:5 windows x86 arch:x86
9c36b08215365d5182f524a8e98c853e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
GetLastError
VirtualProtect
GetSystemInfo
VirtualQuery
WideCharToMultiByte
GetTempFileNameW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetUserDefaultUILanguage
CloseHandle
SetFilePointer
FlushFileBuffers
SetStdHandle
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetProcAddress
ExitProcess
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCommandLineW
WaitForSingleObject
DeleteFileW
GetTempPathW
GlobalHandle
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetLocaleInfoA
user32
MessageBoxW
LoadStringW
shell32
ShellExecuteExW
CommandLineToArgvW
ole32
StgOpenStorage
fxstiff
TiffCreate
TiffClose
TiffStartPage
TiffWriteRaw
TiffEndPage
gdi32
SelectObject
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateICA
DeleteObject
BitBlt
SetBitmapBits
CreateCompatibleBitmap
CreatePatternBrush
CreateBitmap
PatBlt
GdiSetBatchLimit
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE