Static task
static1
Behavioral task
behavioral1
Sample
b2cb99946721bab44f872652b912e342_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b2cb99946721bab44f872652b912e342_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2cb99946721bab44f872652b912e342_JaffaCakes118
-
Size
92KB
-
MD5
b2cb99946721bab44f872652b912e342
-
SHA1
827abe1db5500e3e3ecc2607b447337637f181b8
-
SHA256
28e6dec62b11110a813b6452408f9823f3efc60dc99817279c57faf9efbfea09
-
SHA512
953d3a976962d02c1d59f587193d21d7259cb768ec5b58055bb3f07c9db77022c9d207fb40a0b499b1bb9668ab56ec03539eed6414ed350bab9dc1f28e6943ff
-
SSDEEP
1536:dorUSqIUkFJR8U+nBV6biQha5G2zU4arEHSc2r5lgak:WUSqXk/RHABV6YZarRr5lgr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2cb99946721bab44f872652b912e342_JaffaCakes118
Files
-
b2cb99946721bab44f872652b912e342_JaffaCakes118.exe windows:4 windows x86 arch:x86
511526f55eea6f0c633d7274b61f5269
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
CloseHandle
SetFileTime
GetSystemTimeAsFileTime
GetFileTime
GetLastError
CreateFileA
GetModuleFileNameA
SizeofResource
LockResource
LoadResource
FindResourceA
lstrcmpA
CreateDirectoryA
GetTempFileNameA
GetTempPathA
lstrcpynA
lstrcpyA
GetEnvironmentVariableA
SetFilePointer
InterlockedDecrement
FreeLibrary
FreeEnvironmentStringsA
UnhandledExceptionFilter
LoadLibraryA
GetProcAddress
lstrlenA
MultiByteToWideChar
WriteFile
DeleteCriticalSection
InitializeCriticalSection
LocalFree
GetSystemInfo
VirtualProtect
GetCPInfo
GetOEMCP
RaiseException
GetVersionExA
GetLocaleInfoA
GetACP
lstrcmpiA
InterlockedExchange
GetStringTypeW
GetStdHandle
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
WideCharToMultiByte
LCMapStringA
HeapSize
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetEnvironmentStrings
advapi32
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptReleaseContext
shell32
SHGetSpecialFolderPathA
wininet
InternetReadFile
shlwapi
StrStrA
PathAppendA
crypt32
CryptMsgClose
CertGetNameStringA
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptQueryObject
rpcrt4
UuidCreate
UuidCreateSequential
ole32
CoCreateInstance
CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoSetProxyBlanket
oleaut32
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysAllocString
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ