Static task
static1
Behavioral task
behavioral1
Sample
a390522d579b19a868c63162e844ec5e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a390522d579b19a868c63162e844ec5e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a390522d579b19a868c63162e844ec5e_JaffaCakes118
-
Size
236KB
-
MD5
a390522d579b19a868c63162e844ec5e
-
SHA1
62fd9e64d4bcf85ed43949d09dcf6f0103ab1210
-
SHA256
3cabe45a3889fbc3b6f346e7c124cac09aad5cf9b934d6a0b11bdd7fed9fb836
-
SHA512
41e945fe673041efe88c18a9875d3c4d9f5949924432a68504c582604ede51bc63d3c19ddaf4ef1869dd385d587abd8cb9095cc9ffcbff6b7c9d0c2852026050
-
SSDEEP
6144:3+af3IsaPA8rgDd6toYZrlk0vs1SVzQRo5p:3+I3jdYpBkS+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a390522d579b19a868c63162e844ec5e_JaffaCakes118
Files
-
a390522d579b19a868c63162e844ec5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
aeb9f6af6762d8312c15c06e49886131
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
CloseHandle
GetCurrentDirectoryA
GetConsoleAliasA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer
GlobalHandle
IsDBCSLeadByte
GetModuleHandleA
VirtualProtect
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleW
CreateProcessA
GetTempFileNameA
HeapFree
HeapAlloc
LoadLibraryW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
oleaut32
DispGetIDsOfNames
DispGetIDsOfNames
SafeArraySetIID
CreateErrorInfo
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString
oledlg
OleUIBusyA
Sections
.text Size: 129KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE