Static task
static1
Behavioral task
behavioral1
Sample
b19165274a7d089820d410dbfb8e225d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b19165274a7d089820d410dbfb8e225d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b19165274a7d089820d410dbfb8e225d_JaffaCakes118
-
Size
2.7MB
-
MD5
b19165274a7d089820d410dbfb8e225d
-
SHA1
eeef6fbc19f0bf7a214c69065b967274f5a0c65b
-
SHA256
a4d52c1b736cc8c115166cdcf4459e9aa5007e62aa4535285d9a67cf39367d7e
-
SHA512
4e11eccd5f07bd7ccd90c3f65c4b6cf2a0b176e1e97ec745bfb382f6cf88aa1ae3b7d3f592e73b99adb468c470d34fafe808e10c2c4831f4d4d6217dab3deae0
-
SSDEEP
12288:qztwuuWnHGxxbgdoRwxxo5wWU2v3F79bptMH4Tijk3/DApnpnpnpnpaB/B/B/B/B:qJJuWYUoRZSF2ppjMYTYMRB/B/B/B/B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b19165274a7d089820d410dbfb8e225d_JaffaCakes118
Files
-
b19165274a7d089820d410dbfb8e225d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7137e6618b07f0edb5e6b89dd7f0988
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
LoadLibraryA
GetComputerNameA
GetVolumeInformationA
GetDriveTypeA
FreeLibrary
GetProcAddress
Sleep
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
AreFileApisANSI
CloseHandle
ReadFile
GetLastError
SetFilePointer
WriteFile
SetEndOfFile
FlushFileBuffers
GetFileSize
LoadResource
LockFile
LockFileEx
GetVersionExA
CreateFileA
CreateFileW
GetTempPathA
GetTempPathW
GetFileAttributesA
DeleteFileA
GetFileAttributesW
DeleteFileW
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
LoadLibraryW
FormatMessageA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
CompareStringW
CompareStringA
GetShortPathNameA
LockResource
SizeofResource
FreeResource
GetModuleFileNameA
UnlockFile
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetStdHandle
IsBadWritePtr
IsBadReadPtr
HeapValidate
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetFileType
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetEnvironmentVariableA
advapi32
RegCloseKey
GetUserNameA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
wininet
FindCloseUrlCache
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
Sections
.text Size: 492KB - Virtual size: 491KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ