Static task
static1
Behavioral task
behavioral1
Sample
0227df49c790c6d26a6dc7a448236eae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0227df49c790c6d26a6dc7a448236eae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0227df49c790c6d26a6dc7a448236eae_JaffaCakes118
-
Size
177KB
-
MD5
0227df49c790c6d26a6dc7a448236eae
-
SHA1
d5fe91767553c0296f7abd378616c81dbb0020a3
-
SHA256
d30ef4e945ce5926922bd5bccb6b842324fbf553f61f58e616a62bc865274a5f
-
SHA512
87b3c78bc799498958066f7d7f5cd2893c9203fe8fdd86b6e920d8822641d8192870973a56162414ca74d4ba609bd0bc42ec046123fbe1179a0319d7033144a1
-
SSDEEP
3072:5kHFSO8g1+peg7FzKJWsMUMOVOmvsQXC+uv9K51Ot3bS58QJUGxNsSaA2Fb2H6S3:sFb8gcplpz1sMUZVLDXC+uvo5CLmRZxN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0227df49c790c6d26a6dc7a448236eae_JaffaCakes118
Files
-
0227df49c790c6d26a6dc7a448236eae_JaffaCakes118.exe windows:4 windows x86 arch:x86
bac8e2236bdfec74ee33448129f2956b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
lstrlenW
GetProcAddress
FindResourceA
GetModuleHandleA
GlobalAlloc
GetACP
LoadLibraryA
GetModuleFileNameA
SetLastError
WaitForSingleObject
GetLastError
GetModuleHandleW
GetCommandLineW
ExitThread
ExitProcess
IsBadReadPtr
GetCommandLineA
shlwapi
SHQueryInfoKeyA
SHSetValueA
PathIsDirectoryA
SHStrDupA
SHGetValueA
SHQueryValueExA
SHDeleteKeyA
PathGetCharTypeA
PathIsContentTypeA
SHDeleteValueA
version
VerQueryValueA
VerInstallFileA
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ