Static task
static1
Behavioral task
behavioral1
Sample
aa09219f7495121abf02b82bfc0d5e67_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
aa09219f7495121abf02b82bfc0d5e67_JaffaCakes118
-
Size
5.1MB
-
MD5
aa09219f7495121abf02b82bfc0d5e67
-
SHA1
3f70a09319972400c14ce8b9c283fdfdf0a55c8f
-
SHA256
15d319d206aa67bd8dfc2d2c29c6343047d5df2370de02c719035164e5a36068
-
SHA512
4e56dd1ea3611f71da7fe04203ea835c0c22648e25c07cb1bdc88008dc1531b88e4d3068985e9e54cf430ee159d16c4f11e44e26d84ccd928cdeb986ac019836
-
SSDEEP
98304:Gmw071pZLcI4IcDg5Z9HwtZTNaiOLiTp2diJNr0Nsmk1uudzDR/M6hGz93:6071nXhl5rQ0iAi14sgNJk1uuzJhs93
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa09219f7495121abf02b82bfc0d5e67_JaffaCakes118
Files
-
aa09219f7495121abf02b82bfc0d5e67_JaffaCakes118.exe windows:4 windows x86 arch:x86
ce67518019e9e894c666acdb0bed86e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
GetProcessHeap
CreateEventA
GetFileType
LocalFree
RtlUnwind
GetModuleHandleA
HeapReAlloc
VirtualAlloc
FindResourceW
IsBadReadPtr
GetExitCodeThread
FreeEnvironmentStringsW
VirtualProtect
GetCommandLineW
GetTempPathA
GlobalAlloc
OpenMutexA
ReadFile
GetCurrentDirectoryW
WritePrivateProfileSectionA
GetModuleHandleW
GetLocalTime
Sleep
IsBadWritePtr
GetFileSize
GetConsoleMode
TlsAlloc
CompareStringW
GetFileAttributesA
SetThreadPriority
ResumeThread
lstrcpyA
QueryPerformanceCounter
LCMapStringA
HeapSize
ReleaseMutex
CreateProcessA
SetFileAttributesW
WaitForSingleObject
FindResourceA
ExitProcess
GetFileAttributesW
DeleteFileA
lstrlenA
OpenEventA
CreateFileMappingA
GetCurrentThreadId
GetEnvironmentStringsW
LoadLibraryExA
GetVersion
Sections
.text Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbss Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbss Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbss Size: 7KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbss Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 3KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ