Static task
static1
Behavioral task
behavioral1
Sample
16b1611247a3f94c77257065de6627b0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
16b1611247a3f94c77257065de6627b0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16b1611247a3f94c77257065de6627b0_JaffaCakes118
-
Size
382KB
-
MD5
16b1611247a3f94c77257065de6627b0
-
SHA1
781d0f2d34a8fea4bfd048bb8c5fc6a31b3ed8c6
-
SHA256
83c074b57e0d7d8bec82bcd7ecf30e84c25413ff538f95e0d5ee041e8113fda8
-
SHA512
3b37708caa7bcfbaeed86a6caa60c8191617cddad57a41413ad745bee9d0157fe20846bc5d05e12adddfd9f69ea2318ad901c8cd328d229e078340927d5c5921
-
SSDEEP
6144:5dJ3lUhV9G5RTGhnBQ4haViVcTDDyjV+y:p3lwwXWIVecTDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16b1611247a3f94c77257065de6627b0_JaffaCakes118
Files
-
16b1611247a3f94c77257065de6627b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
da27ee14f0b803fb409a24fc10c6226c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetCPInfo
CreateFileA
VirtualAlloc
ExitProcess
SetFilePointer
FileTimeToDosDateTime
FileTimeToLocalFileTime
SetErrorMode
SetCurrentDirectoryA
GetModuleFileNameA
CloseHandle
CreateThread
LocalFree
FormatMessageA
LocalAlloc
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetLastError
CreateMutexA
GetVersion
LoadLibraryA
DeleteCriticalSection
WaitForSingleObject
lstrlenA
lstrcmpiA
LeaveCriticalSection
GetFileAttributesA
GetCurrentDirectoryA
InitializeCriticalSection
lstrcpyA
HeapFree
HeapAlloc
SetLastError
GetDiskFreeSpaceA
CopyFileA
CreateDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryA
GetEnvironmentVariableA
lstrcpynA
user32
LoadIconA
LoadCursorW
LoadIconW
gdi32
GetDeviceCaps
CreateFontIndirectA
AddFontResourceA
advapi32
RegOpenKeyExA
Sections
FFFFF Size: 324KB - Virtual size: 323KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
FFFF Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ