Static task
static1
Behavioral task
behavioral1
Sample
a8c08d02a01e82d980b81941cf551f7c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8c08d02a01e82d980b81941cf551f7c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8c08d02a01e82d980b81941cf551f7c_JaffaCakes118
-
Size
200KB
-
MD5
a8c08d02a01e82d980b81941cf551f7c
-
SHA1
7325e21aacc8fbf715cdfc6345d25e39f48492f7
-
SHA256
30c33d02159efd49cdb9d3dafe80cd65eaa2919e7ecffee1f862168836a46c2c
-
SHA512
19fc7de700230c2ebdb08cd5b74d2ddff2c605c66a383ee8b56cec7482ce37ce0b32f58911cec664114caa39503e6fc5f3c8b891f8db9af601771c9975a33975
-
SSDEEP
3072:FuGcUWuJ3OcKRddbmUM1B7DOD/Zstti+tqgAPN3ttX6XPPKzBEWQ:FqUvJ/uxmX3DODattiyIN3X6X6HQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8c08d02a01e82d980b81941cf551f7c_JaffaCakes118
Files
-
a8c08d02a01e82d980b81941cf551f7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
95b44139d4e5caa27307c710461b5904
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateToolhelp32Snapshot
GetProcAddress
lstrlenA
GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
LoadLibraryA
Sleep
GetModuleHandleA
WriteFile
CreateFileA
GetCurrentDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryA
GetCurrentProcess
GetModuleFileNameA
Process32First
Module32First
Module32Next
Process32Next
CloseHandle
ExitProcess
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetLastError
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoW
CreateFileW
SetEndOfFile
user32
wsprintfA
advapi32
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.f0Gx Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ