Static task
static1
Behavioral task
behavioral1
Sample
8ce320733c9333dd435f233f9b699246_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8ce320733c9333dd435f233f9b699246_JaffaCakes118
-
Size
212KB
-
MD5
8ce320733c9333dd435f233f9b699246
-
SHA1
874fb00ba2be47596ef475497bf98943cc065e8b
-
SHA256
6d81ee21901526eddaf735ef85063ea431f02558c47ff71bbdf763361406bf64
-
SHA512
a3697fa6f066a4e8a4f62d2759804c784e229e9a99a86951a5cd03e79eaa9a3ab32d9bacf54b4f7d73f3ac55f4fb2a5363c870a266e960287f8c79896351d007
-
SSDEEP
3072:CDaU0tHCCOyoa0lojVwUgw2nhQKVOzxFoGo82p/ADBCrN/+hU6yJz5nmekj2:CDaJCCOZUkTQxFoGQLrzxoekC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ce320733c9333dd435f233f9b699246_JaffaCakes118
Files
-
8ce320733c9333dd435f233f9b699246_JaffaCakes118.exe windows:4 windows x86 arch:x86
a9c0bbef448cf0dfc0f7f18562264111
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
lstrcpyA
FindFirstFileA
GlobalAlloc
ReadFile
CloseHandle
SetFilePointer
CreateFileA
MultiByteToWideChar
GetModuleFileNameA
HeapSize
RaiseException
LoadLibraryA
GetLastError
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
InitializeCriticalSection
user32
wsprintfA
MessageBoxA
ole32
CoCreateInstanceEx
OleInitialize
oleaut32
SysAllocString
SysAllocStringByteLen
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE