Static task
static1
Behavioral task
behavioral1
Sample
c7abb6f3a2a0bc75007630fad9482af4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c7abb6f3a2a0bc75007630fad9482af4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c7abb6f3a2a0bc75007630fad9482af4_JaffaCakes118
-
Size
224KB
-
MD5
c7abb6f3a2a0bc75007630fad9482af4
-
SHA1
a72074d926f2991390756f4ce0e5dad0eb9ff646
-
SHA256
029518e0d442de0ca4f5bd64a88f6df9799d7237b1eb44a4dcfedfa562e3fa78
-
SHA512
5309dcaeabb27e3fc076b145a8e30897ea3b36ed4bd955c8bb82d07ff46c7ea37b7048be9300fe33849f2c29f9dd0380797527362d498462b0368d48fc6bfb7e
-
SSDEEP
3072:ntDlseiioP2jZpqWXsmSRskhiq7mkR9u4SC7vK95WuHM73ErQkFIUQyc:D1H5SZhiqKkR9ZSC7vSscMsQXUE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7abb6f3a2a0bc75007630fad9482af4_JaffaCakes118
Files
-
c7abb6f3a2a0bc75007630fad9482af4_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c933bce7f083c23093981070e5dbed1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
CloseHandle
WriteFile
SizeofResource
GetLastError
CreateFileA
LockResource
LoadResource
FindResourceA
GetModuleHandleA
lstrcpynA
GetModuleFileNameA
GetTempPathA
SetFilePointer
FlushFileBuffers
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
SetStdHandle
shell32
ShellExecuteA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ