Static task
static1
Behavioral task
behavioral1
Sample
ce91f08fc2d1a1eb56ece4f6a1e3d835_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ce91f08fc2d1a1eb56ece4f6a1e3d835_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce91f08fc2d1a1eb56ece4f6a1e3d835_JaffaCakes118
-
Size
1.2MB
-
MD5
ce91f08fc2d1a1eb56ece4f6a1e3d835
-
SHA1
156fec366ce59d0fe05c992f28f015e369d50f70
-
SHA256
0f30a1707107dec352fdda3e7508894a2fdc203b46085b78162845220f1d11d9
-
SHA512
67b644d23982f3134d6544a545812a97df45e61002ffd6130183e2b587ee27d5dcab0d0673790f658507752bf9aa397eef0a2b5166f5b589218edf445694676e
-
SSDEEP
24576:ln7wM7ZWD1YPzYRZX46ZBKTiMvOItN68qk:FsM7ZuY7GZXdSiLMA8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce91f08fc2d1a1eb56ece4f6a1e3d835_JaffaCakes118
Files
-
ce91f08fc2d1a1eb56ece4f6a1e3d835_JaffaCakes118.exe windows:4 windows x86 arch:x86
4cad04a5e6fd88208c9c2c4005a9d04b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameA
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
GetModuleFileNameA
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetVersionExA
GetCurrentProcess
TerminateProcess
GetLocalTime
GetLastError
MoveFileA
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
DeleteFileA
GetSystemTime
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
FlushFileBuffers
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTempPathA
LoadLibraryA
GetTimeZoneInformation
GetProcAddress
GetFileAttributesA
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 328KB - Virtual size: 333KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ