Static task
static1
Behavioral task
behavioral1
Sample
a3ad76867abd73d8ac08f8ec21ae57ea_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a3ad76867abd73d8ac08f8ec21ae57ea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3ad76867abd73d8ac08f8ec21ae57ea_JaffaCakes118
-
Size
51KB
-
MD5
a3ad76867abd73d8ac08f8ec21ae57ea
-
SHA1
c4f38bf90f534e3894e0f2c716029c6e97050667
-
SHA256
06646b83abb9205e24972292106eff1d90857bdd4a0ac9e9ba098c1ac7ac7836
-
SHA512
c7dab1c1ef6c8d14e2d381ad8462c9fe2284525a08e788be842ed5d8960e205a40362420f9601f7e9f8b222466cd5923888d09940dba2317b1f7270ac4e75601
-
SSDEEP
1536:pPgumeGqWTPVX2dYnb4l3B8Iubv2h7xr0Cn:9gumeGHVX2ynslRJu6h71bn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3ad76867abd73d8ac08f8ec21ae57ea_JaffaCakes118
Files
-
a3ad76867abd73d8ac08f8ec21ae57ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
283bc98d110d752c3f1285f9b0bc04fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
VirtualAlloc
lstrcatA
lstrcpynA
CloseHandle
GetModuleHandleA
LoadLibraryA
GetCPInfo
GetCommandLineA
ExpandEnvironmentStringsA
GetStringTypeA
LCMapStringW
LCMapStringA
lstrcpyA
GetModuleFileNameA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
GetProcAddress
MultiByteToWideChar
GetStringTypeW
user32
GetQueueStatus
KillTimer
gdi32
CreateCompatibleDC
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ