Static task
static1
Behavioral task
behavioral1
Sample
b3129eaad799130f8bd20f71f26dc6dd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b3129eaad799130f8bd20f71f26dc6dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3129eaad799130f8bd20f71f26dc6dd_JaffaCakes118
-
Size
75KB
-
MD5
b3129eaad799130f8bd20f71f26dc6dd
-
SHA1
52f2032454fa32a2f2596b65cb43a21edfac72ad
-
SHA256
211c31a218307120f83756f6d0ba986e41e235e38cdcbdf344ff34897664f565
-
SHA512
e96b862d18906a3bf55d56ac39eeff55194f62d321a7b2859af645877de2ca8fdd3e986c34653360d0996c96c702b8a01cf63366a2222c5193303aa237e3e6af
-
SSDEEP
1536:/0M2t2XXoVCSw4gqZ6z0+u+hMaVx3pIE5oBi+E53:/0M2t2oUSw4gqZ6IhyXFT+i/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3129eaad799130f8bd20f71f26dc6dd_JaffaCakes118
Files
-
b3129eaad799130f8bd20f71f26dc6dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
a1ef6cd8ee93f3b043e1118dc887df07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
strlen
strcpy
strncpy
strcat
localtime
mktime
gmtime
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
GetCurrentProcess
GetSystemDirectoryA
GetWindowsDirectoryA
HeapFree
HeapAlloc
GetTickCount
Sleep
GetVersionExA
MultiByteToWideChar
FindClose
FindFirstFileA
GetLastError
FindNextFileA
DeleteFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CreateDirectoryA
CopyFileA
GetDriveTypeA
GetFileAttributesA
MoveFileA
GetLocalTime
WriteFile
GetFileSize
SetFilePointer
ReadFile
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TlsAlloc
TlsGetValue
HeapReAlloc
TlsSetValue
user32
FindWindowA
GetWindowTextA
ShowWindow
imagehlp
MapFileAndCheckSumA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 19B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE