Static task
static1
Behavioral task
behavioral1
Sample
ff4429aca845021b79eb3ccb225e10ad_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ff4429aca845021b79eb3ccb225e10ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff4429aca845021b79eb3ccb225e10ad_JaffaCakes118
-
Size
68KB
-
MD5
ff4429aca845021b79eb3ccb225e10ad
-
SHA1
22f7ee86cf55bd901efd56f55bfbc386ede6c911
-
SHA256
4ffb90b79edb0679ee56e7d51bbbe986bd8527d3b5b02c3daab999e3a739af12
-
SHA512
bf8577d095cab3b8bbe5dd1014f646fd4a7f05f24deb9abb65098a2b39d7944b4854eaeedba733734c72354b9344b710065a060ba60abfa2fab3daef2b018146
-
SSDEEP
768:1dvI0UOXxkOlfFA3x+ofKgnBO74uvaI8aSxmiB9ff3QV9d6UaKjiYlONkP:PAqKODKyPYP3QbdH5lON0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff4429aca845021b79eb3ccb225e10ad_JaffaCakes118
Files
-
ff4429aca845021b79eb3ccb225e10ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7983c017b468af3f071f2f0c05db965
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
WriteFile
CreateFileA
GetLastError
GetCommandLineA
GetLongPathNameA
GetTempPathA
WaitForSingleObject
CreateProcessA
ReadFile
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
Sleep
DeleteFileA
GetPrivateProfileIntA
GetSystemDirectoryA
GetWindowsDirectoryA
WritePrivateProfileStringA
MoveFileExA
OpenMutexA
CloseHandle
CreateMutexA
WideCharToMultiByte
ReleaseMutex
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
IsBadCodePtr
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
SetFilePointer
IsBadReadPtr
user32
WaitForInputIdle
DispatchMessageA
TranslateMessage
PeekMessageA
GetMessageA
advapi32
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegFlushKey
RegCloseKey
RegSetValueExA
wininet
InternetQueryDataAvailable
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
InternetOpenA
Sections
.text Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE