Static task
static1
Behavioral task
behavioral1
Sample
86ea8f19c149f7282e000f71597fabce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
86ea8f19c149f7282e000f71597fabce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86ea8f19c149f7282e000f71597fabce_JaffaCakes118
-
Size
264KB
-
MD5
86ea8f19c149f7282e000f71597fabce
-
SHA1
746d721e9175411be9d4c586d0644fc77f1577cd
-
SHA256
c689486a9670c8c591b0800475910270bde40aa8d7c57f6468866a5c764ed671
-
SHA512
a9314b879d6f2002c9275d53afc03a9ae5545b254749ad2ad1535d4f24fa485f0d73a4eb57fcf685b1c537f27872ef0a8dd0828c93f736b6f83b3c21c61dabc3
-
SSDEEP
384:w76XI7YsLM3JVpzB4ou+tatUqA1x4K7l0aWXGcTR94QdRWrnfXMhAj1u2Bo2Q4Bg:w+Y7pM3JVXPq8xHSaWW9nvgM1qekts
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86ea8f19c149f7282e000f71597fabce_JaffaCakes118
Files
-
86ea8f19c149f7282e000f71597fabce_JaffaCakes118.exe windows:4 windows x86 arch:x86
1192bf0d3799e26a3f2d104b09cf8023
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
GetSystemDefaultLangID
GetCurrentDirectoryA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
shell32
ShellExecuteA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE