Static task
static1
Behavioral task
behavioral1
Sample
c1ad5df5cccad4bee557d73573ae944d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1ad5df5cccad4bee557d73573ae944d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1ad5df5cccad4bee557d73573ae944d_JaffaCakes118
-
Size
3.4MB
-
MD5
c1ad5df5cccad4bee557d73573ae944d
-
SHA1
6f90ecff17421b019f4fe0a703905f792fe848c5
-
SHA256
117e091e36d1e208a40ebd7b309bef2d27c2c580202bb6b2c9fe2df49cbe5a1e
-
SHA512
6a45de7c9ee8b4183d4e98b1dc81c0e454f44acad6d7c0cb972ab798bf1742a1062c9234616d108a0f4c4a8a6106f0bcfa44a8cde21fa64112e5db4e11d0545a
-
SSDEEP
49152:ZqBfleHGI746ikXvOQfn01rHK+XL/Jv4NvhIXEWQDHyms6MCGfveceA:kf8mSRX2Qfn0tqGTm5I03/s/Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ad5df5cccad4bee557d73573ae944d_JaffaCakes118
Files
-
c1ad5df5cccad4bee557d73573ae944d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c54174f05376a10e0a25aa00dc761241
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
TerminateProcess
UnhandledExceptionFilter
Sleep
WideCharToMultiByte
LocalFree
DeleteCriticalSection
EnterCriticalSection
WaitForSingleObject
CreateFileW
GetModuleFileNameW
GetStdHandle
GetStartupInfoW
ReadFile
RaiseException
SetEvent
GetACP
FormatMessageW
TlsGetValue
InitializeCriticalSection
HeapReAlloc
GetConsoleMode
CreateEventW
HeapSetInformation
HeapSize
WriteConsoleW
LoadLibraryW
CreateThread
GetCPInfo
CompareStringW
LCMapStringW
InitializeCriticalSectionAndSpinCount
IsValidCodePage
DeleteFileW
GetConsoleCP
OutputDebugStringW
lstrlenW
GetLocaleInfoW
GetExitCodeProcess
ExpandEnvironmentStringsW
user32
TranslateMessage
ShowWindow
ReleaseDC
MessageBoxW
GetMessageW
GetDlgItem
GetSystemMetrics
GetWindowRect
SendMessageW
EnableWindow
GetParent
EndDialog
SetWindowTextW
SetFocus
GetSysColor
PeekMessageW
EndPaint
ScreenToClient
InvalidateRect
UpdateWindow
SystemParametersInfoW
MessageBoxA
ClientToScreen
Sections
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ