Static task
static1
Behavioral task
behavioral1
Sample
93e1cea5f316a9d9ef8278f728f9bebb_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
93e1cea5f316a9d9ef8278f728f9bebb_JaffaCakes118
-
Size
391KB
-
MD5
93e1cea5f316a9d9ef8278f728f9bebb
-
SHA1
6fe26ad5faf1a8a77d1027c6f48fdd0cdd371671
-
SHA256
4bc54b592697515071a04a1569569713644205dd0c109a78da26751ab9e8c684
-
SHA512
8ecf5f41f94af776262093c483ed48fb3a9ce2f55f100af10675296d75d8120ee40e35c908660796f3c1876d98ed46061c8e90733741ee8ae53cc844c9271fe0
-
SSDEEP
6144:G1BiQ2fgbWAr/YEs5K3ip2iXBY5Eoc5CgQEvlPn2R32AIMsaZPVSKb/QOl:G1BA4TAf5uPiXBY+oc5CgQE9WPI+55
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93e1cea5f316a9d9ef8278f728f9bebb_JaffaCakes118
Files
-
93e1cea5f316a9d9ef8278f728f9bebb_JaffaCakes118.exe windows:4 windows x86 arch:x86
4677196c5fe208829375380369f44ca9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
GetModuleFileNameA
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
CreateFileA
GetEnvironmentVariableA
GetProcAddress
SetThreadContext
WriteProcessMemory
ReadProcessMemory
VirtualProtectEx
GetThreadContext
SuspendThread
Sleep
ResumeThread
FreeLibrary
CloseHandle
GetLastError
CreateFileMappingA
SetFilePointer
GetCurrentProcessId
SleepEx
CreateThread
WriteFile
GetTempFileNameA
CreateMailslotA
SetEnvironmentVariableA
CreateProcessA
GetCommandLineA
SetErrorMode
GetStartupInfoA
GetModuleHandleA
GetFileSize
DeleteFileA
UnmapViewOfFile
GetExitCodeProcess
TerminateProcess
GetVersionExA
DebugActiveProcess
WaitForDebugEvent
ReadFile
MapViewOfFile
GetStringTypeW
ContinueDebugEvent
LoadLibraryA
FlushFileBuffers
HeapFree
ExitProcess
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
RtlUnwind
GetVersion
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
user32
MessageBoxA
EnumWindows
SendMessageTimeoutA
GetWindowThreadProcessId
DestroyWindow
SystemParametersInfoA
CreateDialogParamA
UpdateWindow
SetTimer
DispatchMessageA
TranslateMessage
BeginPaint
EndPaint
LoadCursorA
GetSystemMetrics
ShowWindow
KillTimer
PostQuitMessage
DefWindowProcA
RegisterClassA
CreateWindowExA
GetMessageA
GetDlgItem
SetWindowTextA
gdi32
DeleteObject
DeleteDC
CreateDIBitmap
RealizePalette
SelectPalette
CreateDCA
CreatePalette
BitBlt
SelectObject
CreateCompatibleDC
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ