Static task
static1
Behavioral task
behavioral1
Sample
8c92f9b50fabf021976e000214f08522_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c92f9b50fabf021976e000214f08522_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c92f9b50fabf021976e000214f08522_JaffaCakes118
-
Size
480KB
-
MD5
8c92f9b50fabf021976e000214f08522
-
SHA1
b522f762b5a274e84a88517d6cbb1d73e4951150
-
SHA256
992c6f30e2ac631467090e6a11b28093051fe104cde395e174cef3fcfc84f285
-
SHA512
9868956344f2532a301e5f3f4682549461176a12cda9d98acfbe0b396858c3887c4eb0629edabca08b24c972ad993e48858f6df5bf9aa41eec5615b3704150d6
-
SSDEEP
12288:S4CCxjfQdBPv/L6jCuWyWNFoX3BxajQfB+C:kCxjfAPnL6vWiXBR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c92f9b50fabf021976e000214f08522_JaffaCakes118
Files
-
8c92f9b50fabf021976e000214f08522_JaffaCakes118.exe windows:4 windows x86 arch:x86
273424e8f1bc02aa4e5c07f3f2bcbb01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
CreateTimerQueue
GetModuleHandleA
VirtualAlloc
Sleep
PulseEvent
GetTickCount
LocalAlloc
GetProcAddress
VirtualLock
VirtualQuery
GetSystemInfo
ResetEvent
GetLastError
VirtualProtect
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RaiseException
LCMapStringA
MultiByteToWideChar
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
IsIconic
MoveWindow
GetSysColorBrush
GetWindow
LoadIconA
gdi32
CreateBrushIndirect
winmm
joyGetPosEx
joySetCapture
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 420KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ