Static task
static1
Behavioral task
behavioral1
Sample
266d57d40822016dded591442980414d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
266d57d40822016dded591442980414d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
266d57d40822016dded591442980414d_JaffaCakes118
-
Size
264KB
-
MD5
266d57d40822016dded591442980414d
-
SHA1
ed8e9f54ae78c2a30c7591830a782dcfe9e07ac1
-
SHA256
d6f594078692915d7b87b4bd70f6d603f48edb9303e4a389d3f7e35a02cd7141
-
SHA512
86d200b36bb771ce4c57e27c62ee0cee1d016992d4538818c146be5256c3a83b580d7cbd39a37cf96393d802d52aa3c22e5cd2af2524d663cd5aefee2108ad30
-
SSDEEP
6144:fAJcWWj+nEodqTDMU45KmOk2NfPIlJBn32+LWlgELz:adWjaLdqTq5Kc2NfAH8+LqgMz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 266d57d40822016dded591442980414d_JaffaCakes118
Files
-
266d57d40822016dded591442980414d_JaffaCakes118.exe windows:4 windows x86 arch:x86
82acd4f1b046b8d1a7682e3ca051fb4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetCommandLineA
SetFileAttributesW
GetOverlappedResult
SetConsoleCtrlHandler
GetCurrentThreadId
GetPrivateProfileSectionA
SystemTimeToTzSpecificLocalTime
CopyFileA
ReleaseSemaphore
GetSystemDirectoryA
OutputDebugStringA
GetStartupInfoA
FileTimeToSystemTime
CreateToolhelp32Snapshot
WinExec
GlobalFindAtomW
GetCurrentProcessId
EnumResourceLanguagesW
FindFirstFileW
GetTempFileNameA
IsProcessorFeaturePresent
GetUserGeoID
FreeLibrary
InitializeCriticalSection
IsDebuggerPresent
UnhandledExceptionFilter
GetModuleFileNameA
GetModuleHandleA
GetVersion
ExitProcess
GetProcAddress
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LoadLibraryA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
cmyuycw Size: 192KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ysaieg Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iiomgym Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE