Static task
static1
Behavioral task
behavioral1
Sample
a6f1b0e4e03bb69af9323aa28d8a9a70_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a6f1b0e4e03bb69af9323aa28d8a9a70_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6f1b0e4e03bb69af9323aa28d8a9a70_JaffaCakes118
-
Size
516KB
-
MD5
a6f1b0e4e03bb69af9323aa28d8a9a70
-
SHA1
ac7ebd5d74770b30553e012de5e4e00e20de80f6
-
SHA256
341aa88428a083445319f090aa395cd7576593252caf21cecdfcc716ec1bcefd
-
SHA512
86f44046540f3744b241241e959972f1f241efa366434d5fcf976caea326a8e7e52372ceaada25435b451d9759dad8b090cd40c132675a27151ad26266f6f96f
-
SSDEEP
6144:zc7isO1h4P6pClHZjVHiyUrIdJdZxcXYfIJ7Gz7ZoaDoxIIkt/uKwv2x87EV9q:zK0aagHZjV1XdbcXnGPZoaE0cuxEc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6f1b0e4e03bb69af9323aa28d8a9a70_JaffaCakes118
Files
-
a6f1b0e4e03bb69af9323aa28d8a9a70_JaffaCakes118.exe windows:4 windows x86 arch:x86
203329ce511158380660524ad296cfd1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
VirtualFree
WaitForSingleObject
GetModuleHandleA
VirtualAlloc
GetProcAddress
GetCurrentProcess
DeleteTimerQueue
GetTickCount
GetSystemTime
GetCurrentProcessId
GetLastError
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
VirtualQuery
user32
IsIconic
LoadAcceleratorsA
GetClientRect
psapi
GetModuleBaseNameA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 40KB - Virtual size: 317KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ