Static task
static1
Behavioral task
behavioral1
Sample
af9274520ab1b3f7c3de7995bed8829a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af9274520ab1b3f7c3de7995bed8829a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af9274520ab1b3f7c3de7995bed8829a_JaffaCakes118
-
Size
31KB
-
MD5
af9274520ab1b3f7c3de7995bed8829a
-
SHA1
29fc1850bddbba30d00c6916622df878a95b774d
-
SHA256
78ec6e86dd98c8553a4939848079349d32f122290a9b676fe7fccdf821ede370
-
SHA512
7ce7c639d8b3516635c250a7f394727ae9b322295786741fb83db7c12a4ad0e796f83709f148334da68a032beb8ee94ad85a30e80f82f348d617c76eab724f17
-
SSDEEP
768:fug9FjKXsIzb42SjgPmq691Tj49t5zGjU3tZAlaNWg7yfE:fu8KffJygJ69MGul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af9274520ab1b3f7c3de7995bed8829a_JaffaCakes118
Files
-
af9274520ab1b3f7c3de7995bed8829a_JaffaCakes118.exe windows:4 windows x86 arch:x86
ff5ca5fbc641c8868fa081982fbdc6c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
GlobalMemoryStatus
LoadLibraryA
ReadFile
SetEndOfFile
SetEvent
Sleep
VirtualAlloc
ExitThread
WaitForSingleObject
GetCurrentProcessId
GetCommandLineA
GetSystemTimeAsFileTime
GetSystemDirectoryW
CreateFileW
FreeLibrary
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
HeapFree
HeapCreate
HeapAlloc
ExitProcess
DeleteFileA
CreateThread
CreateFileA
CreateEventA
WriteFile
GetCurrentDirectoryA
CopyFileA
VirtualFree
CloseHandle
msvcrt
calloc
memcpy
malloc
_errno
strlen
strcat
free
wcscat
memcmp
memset
_except_handler3
_time64
_localtime64
memmove
_stricmp
imagehlp
CheckSumMappedFile
advapi32
CryptEncrypt
CryptReleaseContext
CryptDecrypt
CryptSetKeyParam
CryptImportKey
CryptAcquireContextA
CryptDestroyKey
Sections
.text Size: 25KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE