Static task
static1
Behavioral task
behavioral1
Sample
41573d5a5c107f6dbc39a53cad48b869_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
41573d5a5c107f6dbc39a53cad48b869_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41573d5a5c107f6dbc39a53cad48b869_JaffaCakes118
-
Size
104KB
-
MD5
41573d5a5c107f6dbc39a53cad48b869
-
SHA1
c0be5ac618c005fcfc770ba2e864667f175f651b
-
SHA256
4f77001910ee8d2712e0f205bf506c588db8190427208d3b9296e3b74e9f3dac
-
SHA512
b3a692b30e8bbcc4b6dc0d91d83d66d2b043ca2e611c2dae8e6f214bf071eae69cea2427a15024f3ab8654984e071cce7eee6370234a7fc90a257793c09df291
-
SSDEEP
1536:OUQAmpBDz/swA45dLmEtArNw9tJ59fiEU79oOnz:fQ/Bz0I/AROXpO9oOnz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41573d5a5c107f6dbc39a53cad48b869_JaffaCakes118
Files
-
41573d5a5c107f6dbc39a53cad48b869_JaffaCakes118.exe windows:4 windows x86 arch:x86
f15126291c61fe2a07749e228332a2de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetFileTime
GetTempPathA
CreateThread
HeapAlloc
GetProcessHeap
OpenProcess
SetLastError
GetThreadPriority
GetCurrentThreadId
GetFileSize
GetUserDefaultLangID
Process32Next
Process32First
CreateToolhelp32Snapshot
LoadLibraryA
GetProcAddress
GetModuleHandleA
CloseHandle
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
GetModuleFileNameA
GetFileAttributesA
GetCurrentProcess
GetCurrentThread
GetTickCount
GetComputerNameA
SetErrorMode
CreateFileA
SetStdHandle
RtlUnwind
Sleep
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapFree
TerminateProcess
HeapReAlloc
HeapSize
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
FlushFileBuffers
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
user32
GetForegroundWindow
GetWindow
GetDesktopWindow
advapi32
OpenProcessToken
SetServiceStatus
StartServiceCtrlDispatcherA
StartServiceA
ControlService
CloseServiceHandle
DuplicateTokenEx
shell32
ShellExecuteExW
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ