Static task
static1
Behavioral task
behavioral1
Sample
c0625b2f72fc82a362f76c0719a3be41_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0625b2f72fc82a362f76c0719a3be41_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0625b2f72fc82a362f76c0719a3be41_JaffaCakes118
-
Size
176KB
-
MD5
c0625b2f72fc82a362f76c0719a3be41
-
SHA1
8e7abdfaceafecedecf3f7a38c2066d667af6ff0
-
SHA256
448c5c3c95ca77f83d4fca8e8a6e768efa0f8d0772256c151a34e63888f292d4
-
SHA512
6c67a3eb5ebb590e5a8246d13dad17fdfabf05ebd22371ff6a9de90175738f50203c93c67556962530f63b2dc1cbf79a18186666e7aaf37189245681d2a0c53d
-
SSDEEP
3072:PKi4X7luTVWLm59Pk3i/Tt59tD514ryOlR+wA/qkFBxALuhvP:yi4X5iVbbs3kbD51HwA/U6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0625b2f72fc82a362f76c0719a3be41_JaffaCakes118
Files
-
c0625b2f72fc82a362f76c0719a3be41_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab924d28f79a0dc3737a70fd1d7c65f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
lstrcmpA
lstrcmpiA
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
ReadFile
TerminateProcess
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ