Static task
static1
Behavioral task
behavioral1
Sample
b8152551d3839e7072c0f0944ddc66ef_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b8152551d3839e7072c0f0944ddc66ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8152551d3839e7072c0f0944ddc66ef_JaffaCakes118
-
Size
101KB
-
MD5
b8152551d3839e7072c0f0944ddc66ef
-
SHA1
7126a640b4f30dbb99d4d0332e636b2fbbddb837
-
SHA256
de457559dbaaf9b3cabb930d2fced0682c4f2b27ad8fa3c3066e82d2515c4742
-
SHA512
0f968fb9deb3e21e96bc84ea1a7e7e93db9e359c04e9d027c54ce6db9b84200a2c8f5c8e4112c12a899e8b3f20b62fa22974272e940eaea462f737b116f4a6db
-
SSDEEP
768:IUJG821fddySoF5FXsyA0jmtMpLev8bEkSwiJ9WSzyaXVSm0iGOuajU23:jw82pXBoVp3+8bblBQyOL3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8152551d3839e7072c0f0944ddc66ef_JaffaCakes118
Files
-
b8152551d3839e7072c0f0944ddc66ef_JaffaCakes118.exe windows:1 windows x86 arch:x86
8992ba55ed0d16fa30f245832ed801b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
GetModuleHandleW
SetEvent
LocalFree
GetCommandLineA
GetSystemTimeAsFileTime
TerminateProcess
VirtualFree
CreateFileW
SetEvent
DeleteCriticalSection
GetLastError
GetStartupInfoA
LeaveCriticalSection
GetACP
SetUnhandledExceptionFilter
WaitForSingleObject
GetLastError
WaitForSingleObject
InterlockedDecrement
Sleep
GetProcAddress
SetFilePointer
LoadLibraryA
WideCharToMultiByte
Sections
.ifmc Size: 87KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ylvu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tjek Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.axnm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imdo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ebgh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fegj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xjkl Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wtac Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wsdr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE