Static task
static1
Behavioral task
behavioral1
Sample
ba4968b627142f9e2c4d193abaa13e24_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba4968b627142f9e2c4d193abaa13e24_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba4968b627142f9e2c4d193abaa13e24_JaffaCakes118
-
Size
29KB
-
MD5
ba4968b627142f9e2c4d193abaa13e24
-
SHA1
3c993d65d5864397450fb407583d2cadec62ad36
-
SHA256
3874f1b52066ed243ba978975bdb6ed732e100c5eecc5944328ec742c9d1e59f
-
SHA512
a0120ff879b0a2d5835aa68b4ed47378ed0347780f9523d312539eed7b93a3d61afe840ffcb95938808b23638de7f067fd3d0a35d2102a6fdb50f546917cde7d
-
SSDEEP
384:7cblQC5lqy40QilzW9DQnWlRf4RvTsMZUJbdtZ+rAuYELLuGDQJWlRA:gb6CX44lW9pR2gGGR+rAvEdPRA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba4968b627142f9e2c4d193abaa13e24_JaffaCakes118
Files
-
ba4968b627142f9e2c4d193abaa13e24_JaffaCakes118.exe windows:4 windows x86 arch:x86
14abcfb04e9fc02bbd3dcda121f946fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetModuleHandleA
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress
LoadLibraryA
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 822B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ppfd Size: 13KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE