Static task
static1
Behavioral task
behavioral1
Sample
b718439cb9661471d3966eedaada91b0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b718439cb9661471d3966eedaada91b0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b718439cb9661471d3966eedaada91b0_JaffaCakes118
-
Size
526KB
-
MD5
b718439cb9661471d3966eedaada91b0
-
SHA1
531e496bf944a72521e80c9bd0dc6a4280c09ccc
-
SHA256
fc391b3b2d44671afe6399e102c99b2ed0e55a3c0a23175ceedfedc7ff867e8a
-
SHA512
b5c471e6d4e6221a8197e0822eac2eb8869d79ab6a6e221a1788dd456a867ec55fca49ca468c9e82bd937f6420b90baaf964ebd769f5cafeb39f47552fdf308e
-
SSDEEP
6144:/r3cCWfhWRbFVQE9STKp0FdtBwwoaFL4jEXP3Hk0GPQS+DjcfkWYwQm6AkVvsa:T36JKtSLFdtmnOLHX/k3YZjc/dF6DVvl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b718439cb9661471d3966eedaada91b0_JaffaCakes118
Files
-
b718439cb9661471d3966eedaada91b0_JaffaCakes118.exe windows:5 windows x86 arch:x86
100a15badd306a73e174cdcf908e6886
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
PostQuitMessage
MessageBoxW
DefWindowProcW
SendMessageW
DispatchMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
kernel32
TlsAlloc
GetStringTypeW
GetStringTypeA
CreateFileMappingW
GetCurrentDirectoryW
lstrcmpiW
lstrcpyW
SetLastError
CreateFileW
FindFirstFileW
FindNextFileW
DeleteFileW
lstrcpynA
lstrcatA
lstrcatW
CloseHandle
GetFileSize
FindClose
GetModuleHandleA
GetProcessHeap
HeapAlloc
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
Sections
.text Size: 426KB - Virtual size: 426KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ