Static task
static1
Behavioral task
behavioral1
Sample
fe74d04a9c8e8fd9ce8d5c27c4f75e06_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fe74d04a9c8e8fd9ce8d5c27c4f75e06_JaffaCakes118
-
Size
1.0MB
-
MD5
fe74d04a9c8e8fd9ce8d5c27c4f75e06
-
SHA1
97728f6c77a16dae530eba9d307a78238634482c
-
SHA256
00416b4bc6a01dddf4c0e8c5de5a2f5d388cb580d640c3aa802a4b08902b3ad6
-
SHA512
04423272c9eba9a94e0f8c56929d03fcbdfe4051ecb4ab671c8da53cd82a25fda355ae09429fea0182bd67c18b6d4784f7a3a8ac09876c08f1c2c17043372db6
-
SSDEEP
12288:05qFbdEsSWdasuCZBWRdUF0kbBV7tAe4Jm88eOhF5Ki+Ut3FPyeIEyEuwRbPuWH+:0icCzM5czl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe74d04a9c8e8fd9ce8d5c27c4f75e06_JaffaCakes118
Files
-
fe74d04a9c8e8fd9ce8d5c27c4f75e06_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb34397d2da0742c871325330cab9be8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
GetCurrentDirectoryA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
Sleep
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
SetFilePointer
FlushFileBuffers
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadCodePtr
SetStdHandle
ReadFile
GetACP
GetOEMCP
GetLocaleInfoW
SetEndOfFile
SetEnvironmentVariableA
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 461KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 880KB - Virtual size: 878KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ