Static task
static1
Behavioral task
behavioral1
Sample
154b357304175e399381de1d8abcb1f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
154b357304175e399381de1d8abcb1f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
154b357304175e399381de1d8abcb1f6_JaffaCakes118
-
Size
184KB
-
MD5
154b357304175e399381de1d8abcb1f6
-
SHA1
80a4f7049f80583e25d32a79a6e8f284909edb61
-
SHA256
b7c092a7f85678b90f793dc9e4c4b534187c39532c08a6602e48b45e211875f9
-
SHA512
526860b65f793ed701a76cca547e80cf7fb42ff39bc0cae8b986a9f34174bea7779f3e8192deb852413d3b207e06df72132ed6e07032d010f9b8dd69d1a0446a
-
SSDEEP
1536:hjlyD9Nvi0ghe7v+L3zOL2A95X5xcAx937bDE6UNqjao37E:hJ89Fie7v+LjOLL3XTt5/DE6Tjao37E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 154b357304175e399381de1d8abcb1f6_JaffaCakes118
Files
-
154b357304175e399381de1d8abcb1f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
7b941ed4bf84fc56929b083d48f20c53
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
SetCurrentDirectoryA
CreateDirectoryA
GetPrivateProfileIntA
GetWindowsDirectoryA
GetLastError
CreateMutexA
WritePrivateProfileStringA
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
DosDateTimeToFileTime
LocalFileTimeToFileTime
GetFullPathNameA
GetDriveTypeA
SetFileTime
SetFileAttributesA
CreateFileA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetCurrentDirectoryA
GetFileAttributesA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetFileType
ReadFile
WriteFile
SetFilePointer
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
VirtualAlloc
SetEndOfFile
SetHandleCount
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
FileTimeToSystemTime
GetTimeZoneInformation
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
shell32
ShellExecuteA
cabinet
FCICreate
FCIFlushCabinet
FDICopy
FDIIsCabinet
FDIDestroy
FCIDestroy
FCIAddFile
FDICreate
Sections
.text Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ