Static task
static1
Behavioral task
behavioral1
Sample
86f9385778d1236da135c239243eae45_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
86f9385778d1236da135c239243eae45_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86f9385778d1236da135c239243eae45_JaffaCakes118
-
Size
156KB
-
MD5
86f9385778d1236da135c239243eae45
-
SHA1
6ccc6dce97acdf64ae00deef67efd09910f0f71e
-
SHA256
842321c87ca78c9fa11b8b4f435aded1f20ceae09cbcb5c1e8bf0e5712a45bcd
-
SHA512
cab317103d003ec7a0da5b028664fea1d6070b61f2f8263f8090f0f47ab99059d901328a8dffb3c4a8f11a7a63637b1989cce5a375e2fd918c149c7b533f40b5
-
SSDEEP
3072:u9RVBk8Pp9mwErQIU0OM0dwhDFaOPetC38OlRBi947wx:u3VBlPp9mwRla0KhDPetC39R24M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86f9385778d1236da135c239243eae45_JaffaCakes118
Files
-
86f9385778d1236da135c239243eae45_JaffaCakes118.exe windows:4 windows x86 arch:x86
13c282ce54ef997f9d232861e7171c48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
HeapFree
DeleteCriticalSection
LocalFree
IsBadReadPtr
GetSystemTimeAsFileTime
LocalAlloc
QueryPerformanceCounter
IsBadWritePtr
SetLastError
HeapAlloc
InterlockedDecrement
MultiByteToWideChar
LeaveCriticalSection
UnhandledExceptionFilter
GetModuleFileNameW
InterlockedExchange
GetCurrentThread
GetCurrentProcess
TerminateProcess
IsBadCodePtr
Sleep
InitializeCriticalSection
InterlockedIncrement
GetStartupInfoA
ole32
StringFromGUID2
CoTaskMemRealloc
CoUninitialize
CLSIDFromString
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
StringFromCLSID
msi
ord223
msvcrt
_acmdln
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
atoi
_exit
_XcptFilter
exit
_initterm
__getmainargs
_onexit
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ