Static task
static1
Behavioral task
behavioral1
Sample
8e316701da87744a5ec4ef65e19512f2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8e316701da87744a5ec4ef65e19512f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e316701da87744a5ec4ef65e19512f2_JaffaCakes118
-
Size
136KB
-
MD5
8e316701da87744a5ec4ef65e19512f2
-
SHA1
e5ed3d15b6d70d9b1b998d19ab1cc1303a545e76
-
SHA256
d5bc4f28ef011be894388055db45ca0edb0d94d56a185f7d6dca1ae743521cd2
-
SHA512
80e2cfd256f242c2202a18d6ff7fa7eeb372b5a8fb37fdf73f5a883e6285fccbf0260522a9e6fb422c4741db2c466c80736c65de1379f52a15c6ff69a6c52eb8
-
SSDEEP
3072:6zQagoTAcIIRZjfR0QfEzyul3jemtjVxFmS72lz+:68a5nDEh3S4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e316701da87744a5ec4ef65e19512f2_JaffaCakes118
Files
-
8e316701da87744a5ec4ef65e19512f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc75d539dd0c9c73125016cec2dcb6ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
GetSystemDirectoryA
CompareStringW
CompareStringA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetFileAttributesA
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessA
SetEnvironmentVariableA
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.drdata Size: 88KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE