Static task
static1
Behavioral task
behavioral1
Sample
b627454dce6ad853869af56044e00861_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b627454dce6ad853869af56044e00861_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b627454dce6ad853869af56044e00861_JaffaCakes118
-
Size
92KB
-
MD5
b627454dce6ad853869af56044e00861
-
SHA1
9a49c8b053bd9b7718d6e81c4a4d983f80b76bd3
-
SHA256
ff0db7c2e0614f809730e00900dc45b386f8b7ef5841d4a089d3a204e18d0002
-
SHA512
14371238bb2fe7ff5d3e4b4ea8287b3327ddb9c782b7055d6f58b6191a6d4eefbef96f3e78955c7cdbea830692dd576f5e8a5b093864dce22e9710779f82354b
-
SSDEEP
1536:6eiWlD1q7e3B4bgQ+Z8lIFF6VmVQdxqMUnfdj:6eiWlme3B4bT08lIFkVmsxqF1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b627454dce6ad853869af56044e00861_JaffaCakes118
Files
-
b627454dce6ad853869af56044e00861_JaffaCakes118.exe windows:1 windows x86 arch:x86
9b5178d8f8e481479c936f2ed9af43ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCommandLineW
CreateThread
TerminateProcess
QueryPerformanceCounter
EnterCriticalSection
LoadLibraryA
HeapFree
GetStartupInfoW
GetVersionExA
GetVersionExA
FreeLibrary
GetCurrentProcessId
GetProcAddress
GetCommandLineW
GetTickCount
SetFilePointer
CreateFileW
WriteFile
SetFilePointer
SetLastError
TerminateProcess
SetUnhandledExceptionFilter
VirtualFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetACP
GetVersionExA
InitializeCriticalSection
GetCurrentProcessId
VirtualAlloc
Sleep
FreeLibrary
LeaveCriticalSection
Sleep
GetCurrentProcess
HeapReAlloc
HeapFree
GetLastError
Sleep
lstrlenW
HeapDestroy
FreeLibrary
lstrcmpiW
WideCharToMultiByte
Sections
.kjmw Size: 33KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jbvp Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.puuc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.srsh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aetn Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ehda Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jrqm Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ttoc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdgu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE