Static task
static1
Behavioral task
behavioral1
Sample
00353af964e29990d5426becaaac0334_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00353af964e29990d5426becaaac0334_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00353af964e29990d5426becaaac0334_JaffaCakes118
-
Size
36KB
-
MD5
00353af964e29990d5426becaaac0334
-
SHA1
ff20f91683ab9605e5d0b9b7da7cd1295a887197
-
SHA256
b1074c328c9c7586025a8c45bd8005b1cf7fb457ebb2fe0a66570571dc1d50ca
-
SHA512
6a28c538f2a05042611a9712d8140e6a329ee947bc0a45d1c8f5a5691e8b53fd01fd2e4546e7a0cbb696ad570bb1cb25f592f8ccdce9191c63b67b3e476754c9
-
SSDEEP
384:2j+/VA8+QEWy08GYmlgPEZWyTJT5aUiB9CiD5XnVKSx+no5JU6X:2jw8vEZWCbiB93D53VKG+no5JzX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00353af964e29990d5426becaaac0334_JaffaCakes118
Files
-
00353af964e29990d5426becaaac0334_JaffaCakes118.exe windows:4 windows x86 arch:x86
8e6510c2e99cefe2950bbc53fe44e3fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrlenA
GetModuleFileNameA
lstrcmpiA
lstrcpynA
LocalFree
LocalAlloc
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
lstrcatA
HeapReAlloc
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
LCMapStringW
user32
MessageBoxA
wsprintfA
shell32
ShellExecuteA
ws2_32
WSACleanup
htons
gethostbyname
closesocket
connect
WSAStartup
socket
krnlapi
ord3
ord6
ord7
ord10
ord5
ord11
ord13
ord1
ord2
dibtodib
ord1
ord14
ord2
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ