Static task
static1
Behavioral task
behavioral1
Sample
b63b7085e7a1abf19a721046a96a351f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b63b7085e7a1abf19a721046a96a351f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b63b7085e7a1abf19a721046a96a351f_JaffaCakes118
-
Size
36KB
-
MD5
b63b7085e7a1abf19a721046a96a351f
-
SHA1
1739ec201393de9251d79bf4c661998407b83d3e
-
SHA256
efec5b6207e5900b5a4782043942f3543d948b3c0b9872a286edc100a9d3e31d
-
SHA512
dbfdbe02e3dd02c45778be9a6dc0ca060f14bb14bb28828931b429e11cfac79cfa66bec406c4fc020342d87e0472ace29e925233d5539bdd1a580635257500bc
-
SSDEEP
384:vWZTOB90C3AxC92+gldjjiru9I6myPIIS9Egl:vWZK0CFExPmeIHugl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b63b7085e7a1abf19a721046a96a351f_JaffaCakes118
Files
-
b63b7085e7a1abf19a721046a96a351f_JaffaCakes118.exe windows:4 windows x86 arch:x86
95feefe6eccabed2699c2958f8abcf85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
DeleteFileA
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
MoveFileA
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
advapi32
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE