Static task
static1
Behavioral task
behavioral1
Sample
1672d013887adb9617210fe28fa50ee9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1672d013887adb9617210fe28fa50ee9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1672d013887adb9617210fe28fa50ee9_JaffaCakes118
-
Size
657KB
-
MD5
1672d013887adb9617210fe28fa50ee9
-
SHA1
3b2fd89fad4ef543ce55aa68e5b0034591725e9b
-
SHA256
9244d7ee97931b5821aa4cfd7b6e1db67d47faccf8d07e132905773c658270b3
-
SHA512
6f08f38cc5a71d4d88fff191626dbfdb60bb82922ab00ff6fe728c47f92a07f0fa57f9115d60363379142ac6d3ce8604ae717561dcc394f8b447ce51c4122d9f
-
SSDEEP
12288:iZhW3Az5g4UvMBF8hlUQsAj2kmm6BajuZNygFR6sce:gh8Az5u68hl7sAmzgxje
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1672d013887adb9617210fe28fa50ee9_JaffaCakes118
Files
-
1672d013887adb9617210fe28fa50ee9_JaffaCakes118.exe windows:4 windows x86 arch:x86
df35d3c3992667189477b7109ea818ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetShortPathNameA
lstrcatA
lstrlenA
GetWindowsDirectoryA
GetCommandLineA
GetEnvironmentStrings
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
ReadFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
WriteFile
UnhandledExceptionFilter
WritePrivateProfileStringA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
LCMapStringA
LCMapStringW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
user32
wsprintfA
MessageBoxA
SystemParametersInfoA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE