Static task
static1
Behavioral task
behavioral1
Sample
93b6b67b4a0538ecaad31d4c08bafc5b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
93b6b67b4a0538ecaad31d4c08bafc5b_JaffaCakes118
-
Size
53KB
-
MD5
93b6b67b4a0538ecaad31d4c08bafc5b
-
SHA1
42b888a26b8b70d324f193e1fb6f12c493ffb105
-
SHA256
e59af4a6bc9e04032cef8394e23685656db4f2c3f70cd9627216d58a8ffb2e0a
-
SHA512
1184e2f3007cc7c3328fac2f85a171429f85dbdddb96fe611125623f9513b9831e7bc8d01777ccfd50a1524106c3a2c06db9359b7b53ff5d7ec499dece63ba71
-
SSDEEP
1536:UVZGBhgwZcI2Yb2NK7pxzWkkkkkkkkkkkkkkkkkkkkkkkkrolmedEDE:Ud65bQolr6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93b6b67b4a0538ecaad31d4c08bafc5b_JaffaCakes118
Files
-
93b6b67b4a0538ecaad31d4c08bafc5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
62713a2e75db3399468d418ec05c400a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
TerminateProcess
WriteProcessMemory
GetProcAddress
GetModuleHandleA
VirtualProtectEx
VirtualAllocEx
ResumeThread
VirtualAlloc
SetFileAttributesA
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
GetLastError
ReadFile
ExitProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapFree
CloseHandle
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
CreateFileA
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEndOfFile
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE