Static task
static1
Behavioral task
behavioral1
Sample
b7176a9853f54dca7c5b4f220797ba70_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7176a9853f54dca7c5b4f220797ba70_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7176a9853f54dca7c5b4f220797ba70_JaffaCakes118
-
Size
113KB
-
MD5
b7176a9853f54dca7c5b4f220797ba70
-
SHA1
dfb4a62e9d46684b93fe3491db2c24b17f6bb209
-
SHA256
46b492220047f13e3e92ef8ebbf1d1d2e30b421e09bb181c141c637630a3494c
-
SHA512
da416d22a6a7eeb46430c6a5c1c80adbbe17789c82cdd8a5c8f71a18569ddbd713630d238aefc55bedc0b7ceb44b3a14b8ac2babf0bc74a7b23f90fd505a5ffa
-
SSDEEP
1536:ugwmAoPcANOUqoii+UOi8YZYx82+ZjmbHTJKqOo:MmAokeqoQ88dwm7TJK5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7176a9853f54dca7c5b4f220797ba70_JaffaCakes118
Files
-
b7176a9853f54dca7c5b4f220797ba70_JaffaCakes118.exe windows:4 windows x86 arch:x86
598639095b2ecae3c8b725b285032df1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
ReadFile
GetFileSize
DeleteFileA
WritePrivateProfileStringA
lstrcatA
GetEnvironmentVariableA
lstrcpyA
GetCurrentDirectoryA
GetStringTypeA
LockResource
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
CreateFileA
WriteFile
lstrlenA
GetStdHandle
SetHandleCount
CloseHandle
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeW
user32
MessageBoxA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
PeekMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
GetWindowTextA
gdi32
SetBkMode
TextOutA
comdlg32
GetOpenFileNameA
comctl32
ord17
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ