Static task
static1
Behavioral task
behavioral1
Sample
d9f87e744dbc898212a9eaa4594301b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9f87e744dbc898212a9eaa4594301b0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9f87e744dbc898212a9eaa4594301b0_JaffaCakes118
-
Size
312KB
-
MD5
d9f87e744dbc898212a9eaa4594301b0
-
SHA1
6db6a193617ad688847fab965a12a9183eeda241
-
SHA256
f5e444469407a3e894d368b79878a149696015ed2f666dddb49bd484f144d104
-
SHA512
817e4326e71795982b3b637c6236a31162af0c31e38842c4d3701aed8927d944be285d448f6308818f5a5845052bc4f7baadaeb58fceab989e38f5505018b215
-
SSDEEP
3072:i7xf5kQoAp3Rr3zei1tmDZ5e7H5VVTt0BTnNZfsDZYanqn+S8WTul+5OMojoc:oF5kQo01Q95kzuN2DZYa2+S8YuuOM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9f87e744dbc898212a9eaa4594301b0_JaffaCakes118
Files
-
d9f87e744dbc898212a9eaa4594301b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
5436bcd7c08862ff67b551527e5fdd5f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RaiseException
SetEnvironmentVariableA
CompareStringW
CompareStringA
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
ReadFile
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
GetFileAttributesA
HeapFree
CloseHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
IsBadWritePtr
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetFilePointer
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
user32
DefWindowProcA
PostQuitMessage
BeginPaint
EndPaint
RegisterClassA
CreateWindowExA
ShowWindow
SetWindowPos
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
gdi32
TextOutA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 304KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ