Static task
static1
Behavioral task
behavioral1
Sample
13d73639097b1cafdd11c7dc96d7fb1c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
13d73639097b1cafdd11c7dc96d7fb1c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13d73639097b1cafdd11c7dc96d7fb1c_JaffaCakes118
-
Size
177KB
-
MD5
13d73639097b1cafdd11c7dc96d7fb1c
-
SHA1
a09336b8566bdfae8ace654d196c2c73b1a953c5
-
SHA256
19a072d5d61b1a6c0f7058def7da74a954d36eff711ee2ac7526179a6b48d394
-
SHA512
e2cb5d4820d8b86f3be1aac6ffb6e850a556786519355543bbfc17ae1f5c9d4ce3773833c1eb201db9e7e9e29d387afdcc10a1b17437fd4020dcd83866b6f9ea
-
SSDEEP
3072:5kHFSO8g1+peg7FzKJWsMUMOVOmvsQX/+uv9K51Ot3bS58QJUGxNsSaA2Fb2H6S3:sFb8gcplpz1sMUZVLDX/+uvo5CLmRZxN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13d73639097b1cafdd11c7dc96d7fb1c_JaffaCakes118
Files
-
13d73639097b1cafdd11c7dc96d7fb1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
bac8e2236bdfec74ee33448129f2956b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
lstrlenW
GetProcAddress
FindResourceA
GetModuleHandleA
GlobalAlloc
GetACP
LoadLibraryA
GetModuleFileNameA
SetLastError
WaitForSingleObject
GetLastError
GetModuleHandleW
GetCommandLineW
ExitThread
ExitProcess
IsBadReadPtr
GetCommandLineA
shlwapi
SHQueryInfoKeyA
SHSetValueA
PathIsDirectoryA
SHStrDupA
SHGetValueA
SHQueryValueExA
SHDeleteKeyA
PathGetCharTypeA
PathIsContentTypeA
SHDeleteValueA
version
VerQueryValueA
VerInstallFileA
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ