Static task
static1
Behavioral task
behavioral1
Sample
0de91eca4fd9abcbbf01998ca445f317_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0de91eca4fd9abcbbf01998ca445f317_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0de91eca4fd9abcbbf01998ca445f317_JaffaCakes118
-
Size
112KB
-
MD5
0de91eca4fd9abcbbf01998ca445f317
-
SHA1
e7b6616cb1f3dd1674805668e4d93c9bbcf6f542
-
SHA256
09a484ae2ffba9f5812d6fd469c08b01982767ac112ddcdc264ded30b2d1b3b6
-
SHA512
ec26e2587fde341a63b2b79b0120ce69851f752645bdc4f0a69ce8a76681d3df3927ca4b7faf0aac4cf166237a230bef76382c5f2b8883d78ded88823b171a16
-
SSDEEP
1536:npZenq1QZf1tfbtDzLjyiEkT0kIgPo7Ze+GkxJNGCEhAVEh/sllC:nLenq1stlLbEkIioGeghth/clC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de91eca4fd9abcbbf01998ca445f317_JaffaCakes118
Files
-
0de91eca4fd9abcbbf01998ca445f317_JaffaCakes118.exe windows:4 windows x86 arch:x86
a9a67ddaa4ecddb93323a9a03be881a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
UnhandledExceptionFilter
GetModuleFileNameA
SetEnvironmentVariableA
CompareStringW
RtlUnwind
GetSystemTimeAsFileTime
GetLastError
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
CloseHandle
ReadFile
HeapAlloc
InitializeCriticalSection
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetProcAddress
GlobalMemoryStatus
IsBadCodePtr
CompareStringA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
IsBadReadPtr
GetOEMCP
CreateFileA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetCPInfo
GetACP
LCMapStringA
LoadLibraryA
SetEndOfFile
LCMapStringW
libeay32
ord339
ord2433
ord501
ord784
ord808
Sections
.text Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE