Static task
static1
Behavioral task
behavioral1
Sample
29218aec6bb4025679614ea4839bde30_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29218aec6bb4025679614ea4839bde30_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29218aec6bb4025679614ea4839bde30_JaffaCakes118
-
Size
117KB
-
MD5
29218aec6bb4025679614ea4839bde30
-
SHA1
e2982dc121afca1839d8f0bc4dd6af089171c746
-
SHA256
258d1ee773c3a0c9ab7d94c5b3b236c0fbbeb621f8ce40da2365d375148fddf7
-
SHA512
4618c7774c160c6d1ccbcd063b68eec4d2f390f1baf81ba2111e7a4886507be492a4f68677d0c6c5fd4a9f8cb32738873043f46f9d4163a6dfceb2ea274f7fef
-
SSDEEP
1536:1PSbsDptqEBWub7O2HzUqVr68C1S+VKPmP:1qb4tr8unO2HzUq68CZVKPmP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29218aec6bb4025679614ea4839bde30_JaffaCakes118
Files
-
29218aec6bb4025679614ea4839bde30_JaffaCakes118.exe windows:1 windows x86 arch:x86
6c4cd8eb1bccbf81de3e9364ad3fb42e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCommandLineW
WideCharToMultiByte
WideCharToMultiByte
HeapDestroy
HeapFree
lstrlenW
GetACP
UnhandledExceptionFilter
GetStartupInfoW
HeapReAlloc
ReadFile
LocalFree
GetCurrentThreadId
WaitForSingleObject
MultiByteToWideChar
Sleep
GetCommandLineA
HeapDestroy
UnhandledExceptionFilter
LoadLibraryW
UnhandledExceptionFilter
EnterCriticalSection
CreateThread
lstrlenW
HeapFree
LoadLibraryA
UnhandledExceptionFilter
QueryPerformanceCounter
lstrlenW
VirtualFree
GetStartupInfoA
InitializeCriticalSection
HeapAlloc
GetSystemTimeAsFileTime
Sections
.data Size: 104KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE