Static task
static1
Behavioral task
behavioral1
Sample
942dabed256cc83270663c420a222b51_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
942dabed256cc83270663c420a222b51_JaffaCakes118
-
Size
504KB
-
MD5
942dabed256cc83270663c420a222b51
-
SHA1
4398a4744cf51de6e7d12eaa0756f208dfeaf3ca
-
SHA256
23fcf7bc3318841d88d7a0293dee96293e8a45911809972c4c2f5eaa3fc710e9
-
SHA512
6c7464251e100f1ab3797bcc8f2fa4eb6589c4bb950ef0ced017516d7b7dd9e2f74cf1830ab94cc0d0d897d6ef91da1c6942248c2c2d5324d3860d9d374bdef4
-
SSDEEP
6144:vxb4PGVrBntqg8VhgdVMZFnGMwkTPfgXR7ML58YvAzA9yxKEFLUo8sazP7M4HMKE:aPGVrD4JPoXR6ymTYLIsa7RE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 942dabed256cc83270663c420a222b51_JaffaCakes118
Files
-
942dabed256cc83270663c420a222b51_JaffaCakes118.exe windows:4 windows x86 arch:x86
f00cb9d2f831e91be43778bbc9dbf595
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
lstrlenA
GetFileAttributesA
Sleep
GetTempPathA
GetModuleFileNameA
GetCurrentDirectoryA
SetEnvironmentVariableA
CompareStringW
ExitProcess
RtlUnwind
GetModuleHandleA
GetCommandLineA
GetVersionExA
RaiseException
HeapFree
HeapAlloc
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
GetCPInfo
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
VirtualQuery
LoadLibraryA
InterlockedExchange
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetACP
GetOEMCP
SetStdHandle
ReadFile
GetLocaleInfoW
CompareStringA
shell32
ShellExecuteA
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 380KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ