Static task
static1
Behavioral task
behavioral1
Sample
af4572d0759fe39fc1dbbd17945d4d62_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
af4572d0759fe39fc1dbbd17945d4d62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af4572d0759fe39fc1dbbd17945d4d62_JaffaCakes118
-
Size
129KB
-
MD5
af4572d0759fe39fc1dbbd17945d4d62
-
SHA1
dbabf7eaf3fafd446ae177b26c34c6c9c8dbc138
-
SHA256
a8d76e90d5f939ba1e5702e921fd595ef8de08e45e004c1b05a98627ed2eb988
-
SHA512
9623c19acac09daf978e59b1816d3c94dc53735dd0d305d1191dea8128dcf00f5f3fc6be897caaa99e51dc98d64721d660487b39429711f8c889d92e30b30d86
-
SSDEEP
3072:PR2Qt9XQjonnZX1bjmbOVMqJsTu4FOJbfJ:p2Qr8YrpVMK8u4FOJbfJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af4572d0759fe39fc1dbbd17945d4d62_JaffaCakes118
Files
-
af4572d0759fe39fc1dbbd17945d4d62_JaffaCakes118.exe windows:4 windows x86 arch:x86
697a818555c28023b75c9fe664073783
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQueryEx
GetThreadContext
GetProcAddress
LoadLibraryW
SetThreadContext
WriteProcessMemory
VirtualAllocEx
VirtualAlloc
lstrlenW
GetModuleFileNameA
CloseHandle
ReleaseMutex
GetLastError
LoadLibraryA
GetModuleFileNameW
ExitProcess
CreateThread
GetModuleHandleW
CreateFileA
FreeResource
lstrlenA
WriteFile
SizeofResource
CreateFileW
LoadResource
FindResourceW
Process32NextW
GlobalFree
lstrcmpiW
Process32FirstW
CreateToolhelp32Snapshot
GlobalAlloc
GetSystemDirectoryW
lstrcatW
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetModuleHandleA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
msvcrt
fopen
strstr
strchr
wcsstr
_except_handler3
realloc
malloc
fseek
ftell
fread
??2@YAPAXI@Z
fclose
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ