Static task
static1
Behavioral task
behavioral1
Sample
b94393fd1ec84c5a0d2832fff0c71e2b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b94393fd1ec84c5a0d2832fff0c71e2b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b94393fd1ec84c5a0d2832fff0c71e2b_JaffaCakes118
-
Size
132KB
-
MD5
b94393fd1ec84c5a0d2832fff0c71e2b
-
SHA1
9441562c7e80174c49f84b7ac4de6f2dc8a026b4
-
SHA256
e858cab39499c3a857c7ae3d74dd0a706d08685074d2affb7efba79c12b11cac
-
SHA512
5b9ab2f8e773822f22b8f4c84d2dcb909d1e1776946f4c2763c30de64c30917e310011b852dd4d4ddf27a58716b4381e40515ff31e7ffee109d551881993b3bb
-
SSDEEP
3072:MNwJx06wK6oBC+TaOPDO26eiMmoog7nZ4GwO3ljvJfGz5:M6JxHztBJPPDOaiMKg7nZ4GwCuz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b94393fd1ec84c5a0d2832fff0c71e2b_JaffaCakes118
Files
-
b94393fd1ec84c5a0d2832fff0c71e2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
639f8ef6716d7c878664911fc5556527
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetModuleHandleA
GetVersion
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
GetFileSize
LoadLibraryA
GetProcAddress
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
DeviceIoControl
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
LoadResource
SetFilePointer
VirtualAlloc
CreateFileA
FindResourceA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStringTypeW
user32
EndPaint
DrawTextA
BeginPaint
wsprintfA
GetClientRect
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
PostQuitMessage
DefWindowProcA
DestroyWindow
FindWindowA
gdi32
TextOutA
Rectangle
advapi32
RegSetValueExA
RegCloseKey
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ