Static task
static1
Behavioral task
behavioral1
Sample
136a739ba9dad4fcfcf055d4b0d1f650_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
136a739ba9dad4fcfcf055d4b0d1f650_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
136a739ba9dad4fcfcf055d4b0d1f650_JaffaCakes118
-
Size
818KB
-
MD5
136a739ba9dad4fcfcf055d4b0d1f650
-
SHA1
637dea04b5ed8f9196b2e946074272c87f2a6d68
-
SHA256
f4382756240a73170c815d306ab4ab449cb33d5231578c562d21dfcd0a313633
-
SHA512
61c5e1aab139cb137718afad65c82ffd5ffbd3436391b47ba6c91637ba2bff749948a607483f5231d5f10c95d555b58acd6eead4cddbd20892dc2ce49eef0c6d
-
SSDEEP
12288:scdeJUoZ3N2rcpGzU7alxNA9G6HCv76ryX0XzD6tFm6/bOHT2F5ghY2SWAUzE7Ec:sVv5N2jg4A92gXzD6bqHC6vSbsCEiq/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 136a739ba9dad4fcfcf055d4b0d1f650_JaffaCakes118
Files
-
136a739ba9dad4fcfcf055d4b0d1f650_JaffaCakes118.exe windows:4 windows x86 arch:x86
0f32618c7c9173eec1588245086b33e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
lstrcpynA
lstrcatA
lstrcpynA
lstrcpynA
lstrcpynA
GetSystemTime
SetThreadPriority
FindFirstVolumeA
GetVolumeInformationA
VirtualFree
lstrcpynA
Heap32First
GetModuleHandleA
GetDiskFreeSpaceW
WriteFile
lstrcpynA
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
GetFileType
GetCurrentDirectoryA
GetCurrentThreadId
lstrcmpW
lstrcpynA
ReadConsoleA
lstrcpynA
OpenMutexW
VirtualProtect
comuid
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ