Static task
static1
Behavioral task
behavioral1
Sample
d2f93db8e28bb1e5f637eac11c56ff6f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d2f93db8e28bb1e5f637eac11c56ff6f_JaffaCakes118
-
Size
244KB
-
MD5
d2f93db8e28bb1e5f637eac11c56ff6f
-
SHA1
58de01afdf152ad29fbe5feade8de28b6557a2ba
-
SHA256
1e82bd48d5bb736b94bf9b99cd0e686f662f33934e993e5dda8d604e052cffe0
-
SHA512
4e9d387eb44c5e0f832aca212f790b11b3167299be4032ae4d7908406ca2f790660874710974e572e07f921e7985d2112dc3731fbe69f848b1997cb58f443b88
-
SSDEEP
3072:yjQlpRi39Mm+sQ71RdOauo1GUVPEIEqLtH:y0lpRaMdJ1vOiPEc5H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2f93db8e28bb1e5f637eac11c56ff6f_JaffaCakes118
Files
-
d2f93db8e28bb1e5f637eac11c56ff6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
b72bf9e41a73d1e5bf3a14f93cbef539
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
GetStringTypeW
GetStringTypeA
SetEnvironmentVariableA
CompareStringW
CompareStringA
MultiByteToWideChar
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
HeapFree
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
TerminateProcess
GetCurrentProcess
CloseHandle
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
WriteFile
WideCharToMultiByte
GetTimeZoneInformation
ReadFile
GetFileAttributesA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
SetUnhandledExceptionFilter
SetStdHandle
CreateFileA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
SetConsoleCtrlHandler
user32
SendMessageA
CreateWindowExA
InSendMessage
ShowWindow
Sections
.text Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ