Static task
static1
Behavioral task
behavioral1
Sample
d13e912dc6748945864141be9cbc00e1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
d13e912dc6748945864141be9cbc00e1_JaffaCakes118
-
Size
228KB
-
MD5
d13e912dc6748945864141be9cbc00e1
-
SHA1
2cc8f82f1a64199d7c7b7d05ddf2b387bf66523f
-
SHA256
ca281350f5eb074b6a49c8bfacb1109910885887878fed076c5a716aacbb6491
-
SHA512
1e4bea48c7d5e680bcee5b532fd6134c55cc7fdb4777afc4bf2aec4279b44ebe627a3587b513b628dcc1924a27add7fd26f8576d561d9f38b9597c1b3ba05d0b
-
SSDEEP
3072:G9u2ZCprmwRR2ICoNqmDEC4xCiuXiyZFDe7vokaCtGB/1uwoHS5Dns31Wo58Y832:G9uv1zSJNmI/CcyKH6B/1eCDg1zeY8m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d13e912dc6748945864141be9cbc00e1_JaffaCakes118
Files
-
d13e912dc6748945864141be9cbc00e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
3419d4f3824b8a55354effdc89d21d01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
WinExec
GetLastError
DeleteFileA
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
SetFilePointer
HeapAlloc
FlushFileBuffers
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetStdHandle
IsBadReadPtr
IsBadCodePtr
ReadFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CreateFileA
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE