Static task
static1
Behavioral task
behavioral1
Sample
c1bd23ece59e36143d80f7eec0e38c52_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1bd23ece59e36143d80f7eec0e38c52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1bd23ece59e36143d80f7eec0e38c52_JaffaCakes118
-
Size
32KB
-
MD5
c1bd23ece59e36143d80f7eec0e38c52
-
SHA1
dc35c16853cc13caa8b3b79b45da12841111dca3
-
SHA256
14a5c30f0e0a2fc7dbab3c56f90895133d002efcff61deeef6c06597529bea5e
-
SHA512
be19f1fdd6fdd65fe96f8d8ef1ed6e8a42b41f3fe1ed5cbe8badb076c5e2ad68e28813962ec8c10bc08b7103d0fd47feda157f86f9b94be887772017d631764b
-
SSDEEP
768:Bn+ce6nR/48yVo9ZyFdcaiB9jC1xADpA9lE:tRFyVeexxASl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1bd23ece59e36143d80f7eec0e38c52_JaffaCakes118
Files
-
c1bd23ece59e36143d80f7eec0e38c52_JaffaCakes118.exe windows:4 windows x86 arch:x86
3a8419527b8ae7bbe5ced528237000dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
ReadFile
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
SetStdHandle
SetFilePointer
CreateFileA
GetCPInfo
LCMapStringW
wininet
InternetReadFile
InternetGetConnectedState
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
winmm
timeGetTime
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE