Static task
static1
Behavioral task
behavioral1
Sample
4119ebfa48c9fdec769f4d99a2cbfaf0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4119ebfa48c9fdec769f4d99a2cbfaf0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4119ebfa48c9fdec769f4d99a2cbfaf0_JaffaCakes118
-
Size
260KB
-
MD5
4119ebfa48c9fdec769f4d99a2cbfaf0
-
SHA1
584604eaabcc88a98983271eb6ed76320888880c
-
SHA256
807cb77f5d1f188538b6c28028982b8cdb712d00a477ac40bc64fa1be60a0f4c
-
SHA512
d30803863614b559ee069d3489bfea407e095c9bffab78349a5d1a873537a0a52294d8f348e87fadaf38e13353eaa23333f050ea1a9cadaee6ea69741fa1b3a7
-
SSDEEP
3072:WABrB8wvDvBKBQFBrB2BbLteM1ida3LmQ7CNtxu6LQucMnWdhqVln4xKpkfoPeq7:7da8uOhcMWhqVln4xKpkfTqb2Yq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4119ebfa48c9fdec769f4d99a2cbfaf0_JaffaCakes118
Files
-
4119ebfa48c9fdec769f4d99a2cbfaf0_JaffaCakes118.exe windows:4 windows x86 arch:x86
0acdf0be33f62f13e801e6c5f3a3870d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetModuleHandleA
LoadLibraryW
CreateProcessW
GetLastError
HeapFree
HeapAlloc
ExitProcess
GetVersionExA
GetProcessHeap
GetStartupInfoW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
RaiseException
user32
ShowWindow
UpdateWindow
Sections
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 188KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ