Static task
static1
Behavioral task
behavioral1
Sample
f53ab8acf8f8a6f549d326022c38e2ad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f53ab8acf8f8a6f549d326022c38e2ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f53ab8acf8f8a6f549d326022c38e2ad_JaffaCakes118
-
Size
444KB
-
MD5
f53ab8acf8f8a6f549d326022c38e2ad
-
SHA1
9ace52f2e8e8d0f9144ab3557ded77c65ed20a3f
-
SHA256
c810b883591f3e8b468e780b1b16f10f6702cdc9bce16fb01699b06171e5d50c
-
SHA512
95216a6e9d6772ceb558f06d6da0d6a12ff5f95692d06aab1e585f736262d683cd55c57be8ddcdebfade543313d2b24e55ce7a9fe7f8216a404f5020d331baea
-
SSDEEP
6144:OfqIPI9WF1tRGkk2ibnw2SveKZtYn6xSb0FBlg4vl9ry1kDEsWCturBlh:OByWF1teFbnwZve8rB24vl9r2kDEWu5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f53ab8acf8f8a6f549d326022c38e2ad_JaffaCakes118
Files
-
f53ab8acf8f8a6f549d326022c38e2ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
22564143bcb7b4e3b1650b2ceda117c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
GetCurrentThreadId
GetFileType
InterlockedDecrement
VirtualQuery
LoadResource
WriteConsoleA
CreateEventW
GetACP
GetStartupInfoA
WriteFile
ReadFile
GetModuleHandleA
WideCharToMultiByte
InterlockedCompareExchange
GetProcAddress
UnhandledExceptionFilter
GetCurrentProcessId
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
HeapAlloc
FreeLibrary
GetConsoleCP
SetHandleCount
HeapFree
GetProcessHeap
VirtualAlloc
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ