Static task
static1
Behavioral task
behavioral1
Sample
a3f71f71fd349eba971494f2cabafaca_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a3f71f71fd349eba971494f2cabafaca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3f71f71fd349eba971494f2cabafaca_JaffaCakes118
-
Size
28KB
-
MD5
a3f71f71fd349eba971494f2cabafaca
-
SHA1
414de5fcace5b886d5cdc710062a1f474cb3bb73
-
SHA256
d5a67bff71e1e8c8bce2c4e2cdd109332804c8022b29f2505879617480d86cf7
-
SHA512
c8659b4db011c5412aafd6c3337bcfcd4f5b1823376c95885fee4c847ce6834e5d2dd9d1906103010e7f83665acd6f4ed5f9bed94f3b38c9d628d515c2ade7f4
-
SSDEEP
768:0NnTTCw177e4PVLz/CnNSvCKRERrv6Rovo:7+7e4P6NSaKKEovo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3f71f71fd349eba971494f2cabafaca_JaffaCakes118
Files
-
a3f71f71fd349eba971494f2cabafaca_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5fe6563a06e46ae2e8365b6baff0890
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
CopyFileA
Sleep
GetSystemDirectoryA
CloseHandle
GetTempPathA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetTickCount
LCMapStringW
LCMapStringA
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
FlushFileBuffers
wsock32
send
recv
htons
ioctlsocket
gethostbyaddr
socket
connect
WSAStartup
WSACleanup
closesocket
gethostbyname
wininet
InternetOpenA
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE