Static task
static1
Behavioral task
behavioral1
Sample
c0134285a276ab933e2a2b9b33b103cd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c0134285a276ab933e2a2b9b33b103cd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0134285a276ab933e2a2b9b33b103cd_JaffaCakes118
-
Size
79KB
-
MD5
c0134285a276ab933e2a2b9b33b103cd
-
SHA1
434200437cb0bbe357c91558b48a2b4121e88ceb
-
SHA256
c82e2202947ba1b6e8f4cf4849d2f39158c913522ff66ee724792d04bd0dbbe3
-
SHA512
47f7c523e6297cdab9daf24f32787c99333fc7c2b0d89524b62ec5dcd406807ccd9175b5328cb8a9ef783c9893aae1119a071cf406577498cbaecfd04c309d45
-
SSDEEP
1536:+rlye6r6Gj869YcwVKwAsJG3DY1r+drWoFtAPVU:ilyJ9YUwHG3KGtAdU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0134285a276ab933e2a2b9b33b103cd_JaffaCakes118
Files
-
c0134285a276ab933e2a2b9b33b103cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
77310f0f88373a0bfcfa981624bbf775
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExpandEnvironmentStringsA
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDriveTypeW
SetErrorMode
FindNextFileW
FindFirstFileW
VirtualAlloc
GetComputerNameW
GetVolumeInformationA
FindFirstVolumeA
GetProcAddress
GetStartupInfoA
CreatePipe
PeekNamedPipe
CloseHandle
DeleteCriticalSection
HeapFree
GetLastError
HeapAlloc
GetProcessHeap
GetFileSize
CreateFileA
ReadFile
WriteFile
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CreateFileW
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
LCMapStringW
GetEnvironmentStrings
RtlUnwind
RaiseException
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
user32
wsprintfW
wininet
HttpQueryInfoA
HttpSendRequestExA
InternetWriteFile
HttpEndRequestA
HttpOpenRequestA
InternetReadFile
InternetSetCookieA
HttpSendRequestA
InternetOpenA
InternetConnectA
InternetAttemptConnect
InternetCloseHandle
HttpAddRequestHeadersA
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE