Static task
static1
Behavioral task
behavioral1
Sample
135285499476889b341cbcaf9e480ad6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
135285499476889b341cbcaf9e480ad6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
135285499476889b341cbcaf9e480ad6_JaffaCakes118
-
Size
209KB
-
MD5
135285499476889b341cbcaf9e480ad6
-
SHA1
533b02697dd9786e2122967ca781cb17d5a0137e
-
SHA256
6254b5b2a78652569e2f1827d86e9acca51bf6a0a206c539984bab4e86d071fb
-
SHA512
7006e8749164306a3785e10818a2f35cd75e03a9e5342f02ac725b4e00d626e93e8b4a729ac6f9870ede1f31c6d0d7c793b338278e25d52b74abc798057863d5
-
SSDEEP
3072:PQMCcEgPQdzhqE8TMs+NmUTyEKHmJa+O6eP0ccTBK6A5zkS2jbxWGq:PQMCc/oxITElTEHP4e8n1wkSbGq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 135285499476889b341cbcaf9e480ad6_JaffaCakes118
Files
-
135285499476889b341cbcaf9e480ad6_JaffaCakes118.exe windows:4 windows x86 arch:x86
107758b0bc095db21cd5b842c9b970e2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
lstrcatA
GetModuleFileNameA
GetFileAttributesA
lstrcpynA
lstrlenA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LoadLibraryA
GetACP
GetOEMCP
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
RtlUnwind
GetLocaleInfoW
CreateFileW
VirtualAllocEx
CreateFileA
user32
LoadIconA
LoadCursorA
EndPaint
PostQuitMessage
DefWindowProcA
gdi32
GetStockObject
CreateEnhMetaFileA
MoveToEx
LineTo
CloseEnhMetaFile
DeleteEnhMetaFile
advapi32
RegOpenKeyExA
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data7 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ