Static task
static1
Behavioral task
behavioral1
Sample
c2147fde80eb15b8995820f6e6ef8de8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c2147fde80eb15b8995820f6e6ef8de8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c2147fde80eb15b8995820f6e6ef8de8_JaffaCakes118
-
Size
228KB
-
MD5
c2147fde80eb15b8995820f6e6ef8de8
-
SHA1
f1c1734867c0534d235ce04a63729a65eff1cbc1
-
SHA256
5195e6793917460537d67080bc33b96379aa10f76063e978e12bbe17253259ad
-
SHA512
c5ae897f1daf5b59ff5d0217487b16d603437e78e17ae23ca64a80ac24a57658e216e3bc3bf3384bc985bf92e0867c7d1c81119b13d6b0e55bb00c4cc8da8c08
-
SSDEEP
3072:EsRXkYgiI8n0ADH+PxCh43LtrequEN3wqEga:EsRXSjabDH+PxE6LlN3w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2147fde80eb15b8995820f6e6ef8de8_JaffaCakes118
Files
-
c2147fde80eb15b8995820f6e6ef8de8_JaffaCakes118.exe windows:4 windows x86 arch:x86
7da52013d59f16d81edfda8362a5076d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
LockResource
CloseHandle
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetLastError
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
advapi32
GetUserNameA
Sections
.text Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ