Static task
static1
Behavioral task
behavioral1
Sample
b1cb37ffa09ab53b4e166213d504b1e7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1cb37ffa09ab53b4e166213d504b1e7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1cb37ffa09ab53b4e166213d504b1e7_JaffaCakes118
-
Size
154KB
-
MD5
b1cb37ffa09ab53b4e166213d504b1e7
-
SHA1
1ef7f66ebb109f530082e657572b869cbc08f5b0
-
SHA256
ea1d0f47a777f8da41721680bc7e1583b5c026fe356d1664effdaeef03ead992
-
SHA512
a4072086a0f909acbd35f73e516e039b8ce96a36c898f7508ab9f033d538e1d99792f86b6ec1b3e4baa385070ce40520df2a4d4fcda056d1b817607391cc499e
-
SSDEEP
3072:D0uILepp/gZx2DMVI2XBdb4T0pMEqEWx7LAqRfwqtqz34Epfbz1L2S1:uep2Z2+BdsaMEqEWx78IfwI0bzRz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1cb37ffa09ab53b4e166213d504b1e7_JaffaCakes118
Files
-
b1cb37ffa09ab53b4e166213d504b1e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e2aff3c3ac1d9cb9fdd03ee4c65cb3b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetVersionExW
LocalFree
lstrcpynW
FormatMessageW
TlsGetValue
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
lstrcpyW
GlobalFree
SetLastError
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
CloseHandle
GetCurrentThreadId
lstrcatW
GetModuleFileNameW
GetModuleHandleW
SetErrorMode
InterlockedIncrement
GetVersion
lstrcmpW
GlobalFlags
GetVersionExA
FreeLibrary
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
user32
PeekMessageW
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ole32
StgOpenStorageEx
oleaut32
GetActiveObject
SafeArrayGetRecordInfo
VarI2FromUI8
VariantInit
Sections
.text Size: 67KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ