Static task
static1
Behavioral task
behavioral1
Sample
b99cf99d881721ff3740afc6b5343172_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b99cf99d881721ff3740afc6b5343172_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b99cf99d881721ff3740afc6b5343172_JaffaCakes118
-
Size
32KB
-
MD5
b99cf99d881721ff3740afc6b5343172
-
SHA1
0296a67d8fb079ccc296931f8094264ad3d23a67
-
SHA256
017220f6e82fbc1997b0d59901c8e8484b02ef9bea010e7d883d7bfa5f98f7c4
-
SHA512
d493ce3fd304d3115a73c61f800bee357e19e1c83e163f5aba8891ab34fceb80827a5494be089fbf875416e5f328eb0fb2c95308cd819244ee66b3e4b9f71243
-
SSDEEP
384:yQ3bXykJBqhz9QhtGSdYDToS9XHSbOiQ3bXykJBqhz9QhtGSdYDTwS9XHSbO:ytrJ9Qhtn21SOitrJ9Qhtn2dSO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b99cf99d881721ff3740afc6b5343172_JaffaCakes118
Files
-
b99cf99d881721ff3740afc6b5343172_JaffaCakes118.exe windows:4 windows x86 arch:x86
802dcac7aab948c19738ba3df9f356d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strcmp
memmove
memcpy
strncpy
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
HeapAlloc
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetTickCount
TlsGetValue
CopyFileA
WriteFile
HeapFree
CreateFileA
SetFilePointer
GetFileSize
ReadFile
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsFree
GetLastError
SetLastError
WaitForMultipleObjects
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
Sections
.code Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ