Static task
static1
Behavioral task
behavioral1
Sample
f66fdd885871883de3c9835d812bc4e6_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
f66fdd885871883de3c9835d812bc4e6_JaffaCakes118
-
Size
220KB
-
MD5
f66fdd885871883de3c9835d812bc4e6
-
SHA1
8b66c2891e19152baaf0c1f2b5c3735298e99c3f
-
SHA256
21aa2127208d55df0d4781e16289422f4affeeab38bfb8fdb5e0848a2145da72
-
SHA512
1cd477b378803c297e961ed51abd72c2a7936f51c354df3dc1dcb553863dc1fd94f10109d13c5bdb60d4963bc1157a19fd0bf973c4d34a3e9a772a8b920c2a9a
-
SSDEEP
3072:H2tVjU+nWBoPMRaT0yNKjWBQqrn3F1slVeZqEinLt0gXfLUyOCv0SK50S3qpj65u:WP1WBpW9IjQf1tZEdXtOSpS3511HZ9Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66fdd885871883de3c9835d812bc4e6_JaffaCakes118
Files
-
f66fdd885871883de3c9835d812bc4e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
0dbada24556b963f9a93dfc4645e1643
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
VirtualFree
GetLastError
VirtualAlloc
GetCurrentThreadId
ResetEvent
GetModuleFileNameA
CreateEventA
FindNextFileA
VirtualProtect
GetProcessHeap
LoadLibraryA
LocalReAlloc
GetProcAddress
GetEnvironmentStrings
GetModuleHandleA
Sleep
TlsGetValue
WaitForMultipleObjects
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
GetLocaleInfoA
GetSystemDirectoryA
HeapFree
GetSystemInfo
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
user32
LoadIconA
OpenIcon
GetWindow
GetTopWindow
LoadCursorA
GetDesktopWindow
GetDC
GetCursorPos
SetTimer
ReleaseDC
CreateIcon
IsChild
IsIconic
SetCursorPos
GetWindowRect
SetCursor
FindWindowA
GetSysColorBrush
GetLastActivePopup
gdi32
SelectObject
shell32
ShellAboutA
psapi
EnumProcessModules
msvfw32
ICGetInfo
DrawDibEnd
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ