Static task
static1
Behavioral task
behavioral1
Sample
15ca8faf16fdb6bc7482d31f0698ab46_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15ca8faf16fdb6bc7482d31f0698ab46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15ca8faf16fdb6bc7482d31f0698ab46_JaffaCakes118
-
Size
116KB
-
MD5
15ca8faf16fdb6bc7482d31f0698ab46
-
SHA1
8ed692b76fbf719fee4e59a3f5fdfbd179f29f2e
-
SHA256
dd70f1b4fce6daa1fe2782ea2e673f7617bdfefde5cfe55dbe05dbb8106bc191
-
SHA512
d6a81eab38ea51a0cb9f6d8ae03f2eb1940745812ce31eb5c9e8b5a8a384de7c73a218b75770adeb2c482d85d45ddb12219b03d7c6d2ae8182c3cbb341eb34e8
-
SSDEEP
1536:Hp+BEH1IgP/O5Hhfznpaw6c6JCc4rLzX26GC5IpZE1WCmJPBEmQc9q1UHG+4qfZF:HN3O51I1cqCPrLT5IzaW/+a9IUHWmZF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15ca8faf16fdb6bc7482d31f0698ab46_JaffaCakes118
Files
-
15ca8faf16fdb6bc7482d31f0698ab46_JaffaCakes118.exe windows:5 windows x86 arch:x86
b6bf3337517fba24e459a90662443e6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
VirtualAlloc
CreateFileA
SetFileAttributesA
HeapFree
LocalSize
LocalAlloc
GetModuleFileNameA
GetLocalTime
GetLastError
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ntext Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ