Static task
static1
Behavioral task
behavioral1
Sample
b2e3b065488847ea5d8b2fe4ff848de3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2e3b065488847ea5d8b2fe4ff848de3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2e3b065488847ea5d8b2fe4ff848de3_JaffaCakes118
-
Size
77KB
-
MD5
b2e3b065488847ea5d8b2fe4ff848de3
-
SHA1
235e2747ca28cbd20a494e3dbb3c45ab279488e0
-
SHA256
2abcd61bb6cd64f29ad5093bd46631932b78bd1e5df590323b793cb76a03fd02
-
SHA512
6d0d9e18f8ed7f80da9b531b74e59ab19698d4ebc6e79e2074133f8dbc2140dbe4a2aaac76c439c9593c461ea038d2226e1c0fbb9c1533f3e7be204e6ac7dce1
-
SSDEEP
1536:Gxy2s2Rdyxcyd78Hwo3mTNjiQSNZejU4oKAl8//9Truc4uWYjBoK:GxFsC8N6qT96ZejLoKgaZPWYoK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2e3b065488847ea5d8b2fe4ff848de3_JaffaCakes118
Files
-
b2e3b065488847ea5d8b2fe4ff848de3_JaffaCakes118.exe windows:4 windows x86 arch:x86
03fe118a7f47dae5314d85725c4dc58c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LockResource
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetVersion
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetModuleHandleA
GetTickCount
GetOEMCP
QueryPerformanceCounter
WideCharToMultiByte
GetStringTypeW
FreeEnvironmentStringsW
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
user32
RegisterClassExA
UpdateWindow
EndDialog
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
ShowWindow
DefWindowProcA
DestroyWindow
CreateWindowExA
DialogBoxParamA
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEA Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 307B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ