Static task
static1
Behavioral task
behavioral1
Sample
ad7502f4f8057e0e24b3d9e79f474321_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ad7502f4f8057e0e24b3d9e79f474321_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad7502f4f8057e0e24b3d9e79f474321_JaffaCakes118
-
Size
200KB
-
MD5
ad7502f4f8057e0e24b3d9e79f474321
-
SHA1
f3d0120ee772df7a5db9df87748a62f5747ad5a6
-
SHA256
8db2731daedca6aede0f2a16e82465de8930b2d51c3f2343b17d8c67da03099a
-
SHA512
bac3d06e577a8d3afefc942c1bae8e6f923282d9b233429a577dd0e2a72b964dc400864b60339a70d0308066502e6b3d924a5621ce141cf677ae87277ed63857
-
SSDEEP
6144:XA4tgdNYzkmH4bRiFPVdf/hvWkZ6KRHT4DFC:XtUekM4bAPVdHhvfZ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad7502f4f8057e0e24b3d9e79f474321_JaffaCakes118
Files
-
ad7502f4f8057e0e24b3d9e79f474321_JaffaCakes118.exe windows:4 windows x86 arch:x86
be60ea2ee2fff27b3fad81824dee2174
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetExitCodeProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
CloseHandle
OpenProcess
WritePrivateProfileStringA
LCMapStringA
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LCMapStringW
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
psapi
GetModuleBaseNameA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE