Static task
static1
Behavioral task
behavioral1
Sample
14608a30aa2577f162c3d2d111ef4bfd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
14608a30aa2577f162c3d2d111ef4bfd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14608a30aa2577f162c3d2d111ef4bfd_JaffaCakes118
-
Size
252KB
-
MD5
14608a30aa2577f162c3d2d111ef4bfd
-
SHA1
2c69b5561d0feb7ca799459d225f3ef489a30755
-
SHA256
b23b962f613b4b45bedb7e963263aa5da7e4703936c872d2d6335793a0165377
-
SHA512
f692c440907088799417354bc945c5ba88cfa4a92716e873ffc27fd9456c3b1166b7b935c03fc62afeaa7867e7f3883e0d81428973598076e0e70b55e303409f
-
SSDEEP
6144:p1TlTjLEGvAEVGnc3Qkp18kZmO3dNA33mb:p1pL6Eonc3+aA2b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14608a30aa2577f162c3d2d111ef4bfd_JaffaCakes118
Files
-
14608a30aa2577f162c3d2d111ef4bfd_JaffaCakes118.exe windows:4 windows x86 arch:x86
8b59817ce9302d951696d04c04ca2831
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CLSIDFromString
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
dbghelp
MiniDumpWriteDump
wintrust
WinVerifyTrust
kernel32
SetHandleCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetFilePointer
SetStdHandle
CloseHandle
GetLocaleInfoW
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
GetProfileStringA
VirtualProtect
GetWindowsDirectoryA
FlushFileBuffers
CreateEventA
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE