Static task
static1
Behavioral task
behavioral1
Sample
c02d73c95fb347dfa5122f5acad9b4e6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c02d73c95fb347dfa5122f5acad9b4e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c02d73c95fb347dfa5122f5acad9b4e6_JaffaCakes118
-
Size
80KB
-
MD5
c02d73c95fb347dfa5122f5acad9b4e6
-
SHA1
12ee022002c2bff8f83f4d1b08647e5099945e54
-
SHA256
3dd53df2cded746d707b8f1dd6abfb85731821cc600ca4ef24ec7587ad7ef9de
-
SHA512
ed2f675ee47f4f8f5f66abc27da61ac95e6c1cb15cf003e24a0b26db9277e3a3405eeed1c0ba5a582649f6bc70b61d67ce6e26d2cb90a3ba561aca1cb215985e
-
SSDEEP
1536:baFDCzij854vzwc1DTKsojFrKg2Glj6DXMc:uci4YiPMWmMc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c02d73c95fb347dfa5122f5acad9b4e6_JaffaCakes118
Files
-
c02d73c95fb347dfa5122f5acad9b4e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
c4ec260c7e0d39d960bb836bcb283d9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
libtiff
ord118
ord79
ord85
ord62
ord11
ord39
ord38
ord89
kernel32
GetStdHandle
SetHandleCount
SetEndOfFile
LCMapStringW
LCMapStringA
LoadLibraryA
GetOEMCP
GetACP
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
GetLastError
SetFilePointer
GetCPInfo
CloseHandle
GetFileType
GetStartupInfoA
WriteFile
ReadFile
GetProcAddress
RaiseException
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetEnvironmentStrings
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
FlushFileBuffers
CreateFileA
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE