Static task
static1
Behavioral task
behavioral1
Sample
a725f0f890030376008f5c9aafdd81ff_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a725f0f890030376008f5c9aafdd81ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a725f0f890030376008f5c9aafdd81ff_JaffaCakes118
-
Size
80KB
-
MD5
a725f0f890030376008f5c9aafdd81ff
-
SHA1
9f38d8a6b875d7dd2a541de5f82014770ed8eacc
-
SHA256
739ab5bdba7dc8320123db8af8b9a051a725f4aee065506401520b95f6ac8d2e
-
SHA512
17ca90b534e2f0439a62fff35f5749a4eef3d40a32e97105fef851d98f11dc4a24f4d1e0377535f4036423aa56e08f0443d550d9b5c43d38b0db3a50135329d6
-
SSDEEP
768:wh38olTHNzrhhJaklEv1bHnAIYtXUE1DiAjuxSNeZnwltkAn88KhuQxMipwN:whM65WbgIqXdDZKSMiltm8KHC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a725f0f890030376008f5c9aafdd81ff_JaffaCakes118
Files
-
a725f0f890030376008f5c9aafdd81ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
96aaca3dc817e2424267e76cd6ea1bd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryW
CloseHandle
ReadFile
SetFilePointer
CreateFileW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSection
RtlUnwind
HeapSize
user32
wsprintfW
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE