Static task
static1
Behavioral task
behavioral1
Sample
c7b673e91e8af2433bfefb1b13873370_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c7b673e91e8af2433bfefb1b13873370_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c7b673e91e8af2433bfefb1b13873370_JaffaCakes118
-
Size
1.6MB
-
MD5
c7b673e91e8af2433bfefb1b13873370
-
SHA1
e902769d7b4a5187b301950ba7b7f05e5f7f53e5
-
SHA256
35217c8fe501bd3de282561a28bc66c6dfb3eacada054d2d4f0e43d2dda3ce31
-
SHA512
e21e5d2f4194ce47d4603e611b5578baf6005e184bf3ec09df961a208291ecfbee5de4c26c0a6d04539b9fc0165042d285d1123def68d25d6843dfcf8add9f7d
-
SSDEEP
49152:3knTMG1AXlXJ4JnbFrbh3tvY7bndrwP5ONtEmIxv:3kA6I52BnptvYnCwRI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7b673e91e8af2433bfefb1b13873370_JaffaCakes118
Files
-
c7b673e91e8af2433bfefb1b13873370_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ec30fd0f2d7e661bf2dabcfd45372a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
GetAtomNameA
EnterCriticalSection
GetModuleFileNameA
FindNextFileA
CloseHandle
WriteFile
CreateFileA
GetTempPathA
ReadFile
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
GetLastError
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetFilePointer
SetStdHandle
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW
user32
MessageBoxA
DrawIcon
GetDesktopWindow
shell32
ExtractAssociatedIconA
ShellExecuteA
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ