Static task
static1
Behavioral task
behavioral1
Sample
36e97fded42c990e59205b61074c9f8e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
36e97fded42c990e59205b61074c9f8e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36e97fded42c990e59205b61074c9f8e_JaffaCakes118
-
Size
60KB
-
MD5
36e97fded42c990e59205b61074c9f8e
-
SHA1
ca6376b4c3745fb2b1d5fadb9bfc4c95c51c9a68
-
SHA256
66c82b8674c16e24faea63e23434e4075b192fd213f05f30800569f19f29d97e
-
SHA512
1dd77f9ff1febdd400357e59cb48040b6d42c6ac29b28efe0e36465770ba7e33082f84b7a089ced8a75ad44c5735d9da93765b8110f41e2a274418c65fc60caf
-
SSDEEP
1536:Utn5jQnotLLQUAj7sHK8JPXzGcKZ843qEwPJSazb:UtfNLVk7gR6cBEwPJSa3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e97fded42c990e59205b61074c9f8e_JaffaCakes118
Files
-
36e97fded42c990e59205b61074c9f8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
43c08603a5238ba0f36b96d6eb9a2a3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetSystemDirectoryA
lstrcatA
_lcreat
_lwrite
_lclose
GetTimeZoneInformation
InterlockedExchange
RtlUnwind
HeapReAlloc
InitializeCriticalSection
GetACP
GetProcAddress
LoadLibraryA
GetVersionExA
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetLastError
DeleteFileA
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
ExitProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
Sleep
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetOEMCP
user32
GetDesktopWindow
WinHelpA
wsprintfA
advapi32
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
rpcrt4
UuidToStringA
RpcStringFreeA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE