Static task
static1
Behavioral task
behavioral1
Sample
b570d46cb952ac8ac3b4c4762b50eee4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b570d46cb952ac8ac3b4c4762b50eee4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b570d46cb952ac8ac3b4c4762b50eee4_JaffaCakes118
-
Size
1.2MB
-
MD5
b570d46cb952ac8ac3b4c4762b50eee4
-
SHA1
c4c74812c6fa1ea5d3e03ccc2921ae3d90ccade0
-
SHA256
c75f7f501b599976d1016755f894ab9ced79700b834dc1dc1a5544e6173aa9fd
-
SHA512
ed77b8f5c4a2328ef1580158f0bd11baf315805872f5f0b0461b3060573afe4284464a277a490c2396d2d3bee0dde40b05285c5191cd682385ccce8509407a45
-
SSDEEP
24576:cQh12G1NLrBmVX/grS8rTOYr4ckURQWsx7MYQIlgQYHAEBYGmB4vkS:ThpLr6bWyMo5BmPHAmYGS4r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b570d46cb952ac8ac3b4c4762b50eee4_JaffaCakes118
Files
-
b570d46cb952ac8ac3b4c4762b50eee4_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe4bdec14e349d908078b20b90cebc9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
HeapAlloc �a
kernel32
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
ExitProcess
GetFileAttributesA
GetWindowsDirectoryA
GetVersionExA
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
iphlpapi
GetAdaptersInfo
user32
GetWindow
shell32
SHGetFolderPathA
Sections
.text Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 1008KB - Virtual size: 1008KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ