Static task
static1
Behavioral task
behavioral1
Sample
a50ca8bf13decbc84547d888f52e7069_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a50ca8bf13decbc84547d888f52e7069_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a50ca8bf13decbc84547d888f52e7069_JaffaCakes118
-
Size
746KB
-
MD5
a50ca8bf13decbc84547d888f52e7069
-
SHA1
f21108aba677fc47863a0953385eea25b8f219c4
-
SHA256
c8144cf80d3f50bd3a29410c6da3d90a4c1408575f933a00f86c020cd1596dce
-
SHA512
793d4664b5d75dc56983cf275a1f5d00aff5252eebe276a7a56692ac81763320665ff889458c7bc04b8480fbce5df2b3d4ce5cf306806d865edc43633b66365c
-
SSDEEP
12288:e7M/S/Qaa903SEezxBJ+VBlSCm5lkxwfBVIATq3s8B71YdN+QbKchgOrn5ncfUUD:d/S/Qaa90xe3JWlDpKXIATe71SwGZrmD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a50ca8bf13decbc84547d888f52e7069_JaffaCakes118
Files
-
a50ca8bf13decbc84547d888f52e7069_JaffaCakes118.exe windows:4 windows x86 arch:x86
b344d9df5e77cc1fbadc00e2eca8d47a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetCurrentProcessId
GetTickCount
GetModuleHandleA
GetCurrentThreadId
GetLastError
GetVersion
GetCommandLineA
ExitProcess
HeapAlloc
GetProcessHeap
GetModuleFileNameA
GetFileSize
VirtualAlloc
TlsSetValue
GetFileType
Sleep
IsDebuggerPresent
VirtualFree
VirtualQuery
LoadResource
InitializeCriticalSection
CreateProcessA
GetOEMCP
SetEnvironmentVariableA
DuplicateHandle
TerminateProcess
GetSystemTimeAsFileTime
CloseHandle
WriteFile
SetUnhandledExceptionFilter
InterlockedExchange
ReadFile
GetFileAttributesA
GetCPInfo
SetStdHandle
InterlockedCompareExchange
GlobalLock
HeapSize
MultiByteToWideChar
WideCharToMultiByte
LockResource
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
RaiseException
GetACP
GlobalAlloc
LoadLibraryA
FlushFileBuffers
TlsAlloc
HeapDestroy
QueryPerformanceCounter
FreeLibrary
WaitForSingleObject
LoadLibraryW
GetSystemInfo
HeapCreate
GetConsoleOutputCP
GetStdHandle
LCMapStringW
GetEnvironmentVariableA
user32
SendMessageA
LoadCursorA
CheckMenuItem
GetDC
PeekMessageA
MessageBoxA
PostMessageA
UpdateWindow
SetWindowPos
ShowWindow
SetFocus
Sections
.text Size: 713KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ