Static task
static1
Behavioral task
behavioral1
Sample
b493e59b27b750e7dcaecc342e2d5c8d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b493e59b27b750e7dcaecc342e2d5c8d_JaffaCakes118
-
Size
89KB
-
MD5
b493e59b27b750e7dcaecc342e2d5c8d
-
SHA1
23a014c32fb2656029e89d679e451bb75fa1e9cd
-
SHA256
12d542f0b1992d2db8e5d5260ee9b02df10ac9cc112be76ddab240ce329effb9
-
SHA512
66ea146891219683b5d222976ba51e3a540c3e7b6c740394778bb419984db783433702b86dd695ac288a3e86e607330822bc69161d89450a484b2b59ce9c66eb
-
SSDEEP
1536:uFArTPm7UY7V3Bp0bVZv9eaLrKtc0k0mdMGPzlo+J0kj4xJoHv:uFepY7Vxp0ZZvkPe4mzjJX4xJoHv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b493e59b27b750e7dcaecc342e2d5c8d_JaffaCakes118
Files
-
b493e59b27b750e7dcaecc342e2d5c8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
8e5153ece6fe163dff0507b952b348d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
setupapi
SetupCopyOEMInfA
kernel32
TlsGetValue
GetLastError
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE