Static task
static1
Behavioral task
behavioral1
Sample
c1e81cc00c92b0fe2edfb2329ace6bed_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c1e81cc00c92b0fe2edfb2329ace6bed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1e81cc00c92b0fe2edfb2329ace6bed_JaffaCakes118
-
Size
320KB
-
MD5
c1e81cc00c92b0fe2edfb2329ace6bed
-
SHA1
3f69a4dfa30946a42e3be72b2f9a24a12e68278a
-
SHA256
40105ef6b0c38bb2178868d405089341ea8cfd1853cc149f8487bb2d1a5e07dd
-
SHA512
39fff64303cc9f9e3bfb37ba99eb9418874bbfa97e8d40afe80e2fa722136719cafb4399ed3d3ae99f50143423a366761ce29ae378a074a55fb179d1affa087f
-
SSDEEP
6144:5aFOuNaVqU3oHxNQXMTJcLKFyc50iQV9IdLFCM/zu5coEq6tjD9VJQ9IkbX:oousVqU4H3QX6g3/IdhCM/znq6hD9VMT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1e81cc00c92b0fe2edfb2329ace6bed_JaffaCakes118
Files
-
c1e81cc00c92b0fe2edfb2329ace6bed_JaffaCakes118.exe windows:4 windows x86 arch:x86
9228d93eb1c6e918138137c97586a986
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetCurrentThreadId
GetTickCount
CreateFileA
GetFileType
GlobalAlloc
CreateFileW
LocalFree
SetEvent
SetEnvironmentVariableA
GetModuleHandleW
GetStringTypeW
GetACP
FindNextFileA
GetCommandLineA
SetStdHandle
FindFirstFileA
GetCurrentProcess
lstrcpyA
SetUnhandledExceptionFilter
InterlockedExchange
ReadFile
GetSystemTimeAsFileTime
GetModuleHandleA
GetStringTypeA
WideCharToMultiByte
CompareStringW
GetProcAddress
DeleteFileW
FreeEnvironmentStringsW
SetErrorMode
ExitProcess
DeleteFileA
LCMapStringW
GetCurrentProcessId
GetLocaleInfoA
GetStartupInfoA
VirtualQuery
lstrcmpiW
GlobalUnlock
GetVersionExA
TlsAlloc
HeapAlloc
QueryPerformanceCounter
FreeLibrary
WaitForSingleObject
GetStdHandle
GetLastError
GetCurrentThread
GetVersion
user32
GetFocus
ShowWindow
LoadCursorA
GetWindowLongA
ReleaseDC
GetDC
IsWindow
DefWindowProcA
SystemParametersInfoA
SetFocus
Sections
.text Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ