Static task
static1
Behavioral task
behavioral1
Sample
87ac58531aa9d94654916160b73d414a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87ac58531aa9d94654916160b73d414a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87ac58531aa9d94654916160b73d414a_JaffaCakes118
-
Size
136KB
-
MD5
87ac58531aa9d94654916160b73d414a
-
SHA1
7c324052607690451987f12f1bf9329614b53d08
-
SHA256
518dca18e5b31ab1e58cc01bad7c3c87cdf2de835db2dbd76cda051f81f098fc
-
SHA512
2369a18ee39dcd9e169b8f61a94c7ef0cd5fa27b008aadd4d0ad230ead1a99ad576c61baebec3e25b7fbf94b34e2689bcf95bf49333d259bad6055dbf5aee190
-
SSDEEP
3072:YTglmtMZ/x6tiRBRQdfDKZT0BFg9Va77SrY:x3JiOABFUk77IY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87ac58531aa9d94654916160b73d414a_JaffaCakes118
Files
-
87ac58531aa9d94654916160b73d414a_JaffaCakes118.exe windows:4 windows x86 arch:x86
eec087a5782d80704ce68ff2296183b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GlobalAlloc
GetProcAddress
LoadLibraryA
GetSystemTime
ReadFile
ExitProcess
HeapFree
GetTickCount
HeapAlloc
GetProcessHeap
Sleep
CreateThread
GetCommandLineA
CreateFileA
GetVersionExA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
MessageBoxA
gdi32
SetDCBrushColor
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ