Static task
static1
Behavioral task
behavioral1
Sample
b705825471e185779b92d220ef392498_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b705825471e185779b92d220ef392498_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b705825471e185779b92d220ef392498_JaffaCakes118
-
Size
102KB
-
MD5
b705825471e185779b92d220ef392498
-
SHA1
e9f4844e5faef520ecaa08a2e38563080077a457
-
SHA256
e068092af75b17b6a28898ccbb90122a01925746952c46b44b76ba89d5d271b8
-
SHA512
9e1a11cc28f6cd344c10e94e4dcb0e0b0f21a57e648e9e7db1655d9ed375f314c95cdbf698416bc25a89e0d79f654ee266a40d123b3c5fdf16a9cac103c19025
-
SSDEEP
1536:B+g7XbfJsQazr6lEwsFkAXearpahlkdwGtvDKG+GIISZII/u7aSSpIJkhFPK:fbcr6lhsVXeat+kdwy4jISqIWGQkhFy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b705825471e185779b92d220ef392498_JaffaCakes118
Files
-
b705825471e185779b92d220ef392498_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3ff0c2868053d5b5523a24c2c3502b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
Sleep
DeleteFileA
ExitProcess
GetProcAddress
LoadLibraryA
CopyFileA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GetTickCount
GetLastError
lstrcpyA
GetSystemTime
VirtualAlloc
lstrcatA
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetStdHandle
HeapSize
GetSystemInfo
user32
GetWindowRect
GetWindowRgn
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ