Static task
static1
Behavioral task
behavioral1
Sample
41b2282dc10d7603e2bb26f0662d195f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
41b2282dc10d7603e2bb26f0662d195f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41b2282dc10d7603e2bb26f0662d195f_JaffaCakes118
-
Size
261KB
-
MD5
41b2282dc10d7603e2bb26f0662d195f
-
SHA1
5f3ffe3e1fbf0a39631581684542f39aacfa3c63
-
SHA256
bcd37dc560b2f155a456096f23a5d2020351203379606d92387949868c8caafc
-
SHA512
d2ce4e279d138741372aab1dadab14e3c052b204b246ed7ecbf4dce0f8f0f0a3aeca11682d95fab8ed1000e7967518522e91f52716a7d439a8bb656342fd2967
-
SSDEEP
6144:lIcB+xbQHQkmxXt6+K1c2viZAGaqCO2NZCiX7BTfPPF:yc5Igx1MVrMCiLBDF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41b2282dc10d7603e2bb26f0662d195f_JaffaCakes118
Files
-
41b2282dc10d7603e2bb26f0662d195f_JaffaCakes118.exe windows:4 windows x86 arch:x86
439b12197bbb64db8d92a98b9e33da83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
GetStringTypeW
GetTimeZoneInformation
LCMapStringW
GetProcAddress
GetUserDefaultLCID
HeapReAlloc
MultiByteToWideChar
SetStdHandle
GetFileType
GetCurrentProcessId
SetEnvironmentVariableA
SetComputerNameA
FreeEnvironmentStringsA
SetHandleCount
TlsFree
GetVersionExA
GetStartupInfoW
SetLastError
TlsGetValue
GetACP
Sleep
GetTempFileNameW
GetProcessHeap
HeapSize
GetFileAttributesW
GetEnvironmentStrings
HeapCreate
SetFilePointer
ExitProcess
GetTickCount
SetLocalTime
SetConsoleCtrlHandler
HeapFree
CompareStringW
GetModuleFileNameA
GetLocaleInfoW
LoadLibraryA
QueryPerformanceCounter
CompareStringA
VirtualAlloc
SetConsoleScreenBufferSize
WriteConsoleOutputW
TlsAlloc
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
VirtualFree
DeleteCriticalSection
FreeEnvironmentStringsW
GetCommandLineA
IsValidCodePage
SetUnhandledExceptionFilter
GetTimeFormatA
GetCurrentThread
GetSystemTimeAsFileTime
EnterCriticalSection
GetMailslotInfo
GetLongPathNameA
EnumSystemLocalesA
FreeLibrary
WriteConsoleW
LCMapStringA
InitializeCriticalSection
UnhandledExceptionFilter
GetSystemTimeAdjustment
GetCPInfo
IsValidLocale
WideCharToMultiByte
GetStringTypeA
LeaveCriticalSection
GetDateFormatA
SetEndOfFile
InterlockedExchange
GetLastError
TlsSetValue
CreateMutexA
InterlockedDecrement
GetWindowsDirectoryA
GetEnvironmentVariableW
HeapDestroy
GetStdHandle
HeapAlloc
IsDebuggerPresent
ReleaseMutex
GetVersion
GetStartupInfoA
VirtualQuery
GetModuleHandleA
InterlockedIncrement
GetEnvironmentStringsW
GetOEMCP
RtlUnwind
RtlZeroMemory
WriteFile
user32
RemovePropA
SetDoubleClickTime
GetTabbedTextExtentW
GetInputDesktop
GetUpdateRect
LoadCursorA
SetCursorPos
GetClipboardSequenceNumber
IsWindowEnabled
EndDeferWindowPos
ToUnicode
GrayStringA
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ