Static task
static1
Behavioral task
behavioral1
Sample
a045dc8f363bc3244899dcf17c862724_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a045dc8f363bc3244899dcf17c862724_JaffaCakes118
-
Size
220KB
-
MD5
a045dc8f363bc3244899dcf17c862724
-
SHA1
fd670afed33d03d9b0aba4c34bb6a11385ef33b4
-
SHA256
adb95e567ea9a197d69f387f7ff1ae4d4f2739ae432dfd3ffd45cd26c4662303
-
SHA512
8722297ae6dd160440aa068e41a1fe13694bc689d07645bda2f467c4c2e33ff71d1aad67243262a99266c9ee1bc6f41c08cf0cd5a74a1ba7ab4cf4fb03fcdf31
-
SSDEEP
3072:6dy0gzl6p2xY7xbHL+SniXrcCr/NHAYwoUbOE72Yp6O7QPUpoWfDNsJ5K2:6pnx7L+/Br5AwUqo6yQ8CTXD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a045dc8f363bc3244899dcf17c862724_JaffaCakes118
Files
-
a045dc8f363bc3244899dcf17c862724_JaffaCakes118.exe windows:4 windows x86 arch:x86
171811f208bad25d96be15267fdebefe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
GetLastError
VirtualAlloc
ReleaseMutex
WaitForSingleObject
GetFileType
VirtualProtect
LoadLibraryA
ResetEvent
GetProcAddress
GetExitCodeThread
GetModuleHandleA
HeapFree
VirtualLock
InterlockedExchange
GetLocaleInfoA
Sleep
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
GetTempFileNameA
HeapCreate
HeapDestroy
SetHandleCount
GetSystemInfo
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
user32
GetParent
GetDesktopWindow
LoadIconA
GetDC
LoadCursorA
IsWindowVisible
SetTimer
ReleaseDC
CreateIcon
InSendMessage
IsIconic
SetCursorPos
LoadAcceleratorsA
GetWindowRect
SetCursor
DestroyWindow
IsZoomed
FindWindowA
GetCursorPos
gdi32
FloodFill
shell32
SHCreateShellItem
psapi
EnumProcesses
GetProcessMemoryInfo
msvfw32
ICClose
DrawDibClose
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ