Static task
static1
Behavioral task
behavioral1
Sample
965258238413b5b6f4a94f7d82ab9159_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
965258238413b5b6f4a94f7d82ab9159_JaffaCakes118
-
Size
185KB
-
MD5
965258238413b5b6f4a94f7d82ab9159
-
SHA1
8016166fa2a9c5264446e3a95deb20b6f0e8430d
-
SHA256
ae014a640072d0fecdddab74946459571919cc2acc62ab8b5a4999d18be8be16
-
SHA512
9cfb1f3492b2516f252af175df5d54c365cff826c1a350fa6f13d00c914b8bffca51a27b5a293a8d656b0f268b95a875fd61a5b41b1c8d895641faccedaa0c06
-
SSDEEP
1536:rB3M9sWWf0kpKKZ9xaJqwjnQ4NuCR0LYbAo6T1pZ/oEdU:rB89sWo8KZ7aJ7Q4NuCCLYEZT3FoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 965258238413b5b6f4a94f7d82ab9159_JaffaCakes118
Files
-
965258238413b5b6f4a94f7d82ab9159_JaffaCakes118.exe windows:4 windows x86 arch:x86
66fc43a21c1a8f793e1cb98e915a7e68
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
MoveFileExA
CopyFileA
GetTempPathA
FindClose
FindNextFileA
FindFirstFileA
GetVolumeInformationA
GetModuleFileNameA
GetLogicalDrives
WinExec
GetLongPathNameA
GetLastError
MoveFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
CloseHandle
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
ReadFile
SetFilePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetConsoleCtrlHandler
CreateFileA
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetEndOfFile
LCMapStringA
LCMapStringW
Sections
.text Size: 144KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ