Static task
static1
Behavioral task
behavioral1
Sample
acee32307aae8fd798d619387795977a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
acee32307aae8fd798d619387795977a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acee32307aae8fd798d619387795977a_JaffaCakes118
-
Size
148KB
-
MD5
acee32307aae8fd798d619387795977a
-
SHA1
c6f6f02be1582ad3f9d05e964d8595fcd34bc239
-
SHA256
9a583f4596a96ca5567c278ccb806a809ff71851a6fa42e4d596effc8de55b4f
-
SHA512
cbb9cdcf8dda4c5eb81a5cf910f988946ba4ca49586758f5740b38d1c596fc24816eeccce38056c43e9a7a0465c43f2eedd97f33d0963900cd405c499c7e7318
-
SSDEEP
1536:rMI7URQolkjoQske6CIbqtqqN7qoSuBZ9iH++z7aaZoNFh:rMI7OQEkExkehqqN7qoSC9ieK7HoNFh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acee32307aae8fd798d619387795977a_JaffaCakes118
Files
-
acee32307aae8fd798d619387795977a_JaffaCakes118.exe windows:4 windows x86 arch:x86
bdc4aa0598b19fa8d6ecf9b219208d93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
FindClose
SetFileAttributesA
FindNextFileA
FindFirstFileA
OpenProcess
GetCurrentProcess
DeleteFileA
GetTempPathA
TerminateProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
CopyFileA
CreateDirectoryA
GetModuleFileNameA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
ReadFile
RtlUnwind
GetLastError
GetFileAttributesA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
RaiseException
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
CloseHandle
WriteFile
SetFilePointer
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetUnhandledExceptionFilter
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEnvironmentVariableA
advapi32
RegDeleteKeyA
RegRestoreKeyA
RegOpenKeyA
RegSaveKeyA
RegCloseKey
RegCreateKeyA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
shell32
SHGetSpecialFolderPathA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ