Static task
static1
Behavioral task
behavioral1
Sample
d3b8f2ad2980b32fd4b3c6c3c07afe82_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
d3b8f2ad2980b32fd4b3c6c3c07afe82_JaffaCakes118
-
Size
140KB
-
MD5
d3b8f2ad2980b32fd4b3c6c3c07afe82
-
SHA1
6aca1cb41f6100d85c6909b3865d73584e15802f
-
SHA256
b1c195137c2163ac276e17b676f115d926a8a22ee07fbb939df535ac2a3ea7a8
-
SHA512
eddee39590b1136c3cbfaaed669539baf1a5d272396576f4599bbb1d48d129ce0e9bd0dfe2903879cba4170859f903ff5e68deec99d1f724eabb49294e1a05c3
-
SSDEEP
3072:VS7VUlpwoi3QW07ZQgc8YyvVhpiupDWYIY0urg:VaVUPus7Xc8YyNzJDHIorg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3b8f2ad2980b32fd4b3c6c3c07afe82_JaffaCakes118
Files
-
d3b8f2ad2980b32fd4b3c6c3c07afe82_JaffaCakes118.exe windows:4 windows x86 arch:x86
7633c98efc14f557030f121e25574e66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
GetModuleHandleA
FreeLibrary
LoadLibraryA
CloseHandle
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
GetSystemDefaultLCID
GetProcAddress
lstrcatA
MoveFileExA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
FindFirstFileA
GetCurrentProcess
GetLastError
lstrcpyA
lstrlenA
lstrcpynA
GetVersion
GetVersionExA
GetWindowsDirectoryA
GetPrivateProfileStringA
HeapFree
WideCharToMultiByte
TerminateProcess
CompareStringW
CompareStringA
SetEnvironmentVariableA
LCMapStringW
lstrcmpiA
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LCMapStringA
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetACP
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetOEMCP
SetFilePointer
SetEndOfFile
ReadFile
user32
wsprintfA
ExitWindowsEx
MessageBoxA
advapi32
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteValueA
RegEnumValueA
RegOpenKeyExA
shell32
FindExecutableA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE