Static task
static1
Behavioral task
behavioral1
Sample
449c0aee5d3f62fb4a4148b9550a96f5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
449c0aee5d3f62fb4a4148b9550a96f5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
449c0aee5d3f62fb4a4148b9550a96f5_JaffaCakes118
-
Size
132KB
-
MD5
449c0aee5d3f62fb4a4148b9550a96f5
-
SHA1
834fcbe5023b0312298d57dc720dab3b5f9c90da
-
SHA256
f2838a1ec7895c40b1e6068008599f2696705f5e4dcde1a49c6bdd7138cbbb00
-
SHA512
c1a3de7a694a5be1e6e0eb5494846ef7a5d595377ec912899eadb18428f02a034fddc7347882dc825d99e5babf3235fd2912386a75fe9826eb72f053d772520e
-
SSDEEP
3072:RPZFDl30l7X/ZuWJlnfghmr51KKBvf+NArpuZPRr:RbGhRR4grW+vfxrpiPR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 449c0aee5d3f62fb4a4148b9550a96f5_JaffaCakes118
Files
-
449c0aee5d3f62fb4a4148b9550a96f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
b51c97838fc675fa40b8990f29a12e5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
ExitProcess
GetStartupInfoA
DisableThreadLibraryCalls
SetLastError
GetFileAttributesW
CreateFileMappingA
IsBadWritePtr
GlobalFree
MoveFileExA
GetTempFileNameA
SetCriticalSectionSpinCount
GetSystemDefaultLCID
GetFileSizeEx
IsBadHugeWritePtr
FileTimeToSystemTime
SetFileTime
Module32FirstW
BeginUpdateResourceW
SetUnhandledExceptionFilter
DeleteTimerQueueTimer
SetConsoleWindowInfo
RegisterConsoleVDM
ReplaceFileA
RtlFillMemory
WriteConsoleInputVDMA
SetComputerNameExA
GetPrivateProfileSectionNamesW
GetStdHandle
CopyFileW
FreeUserPhysicalPages
CopyFileW
SetEvent
FreeUserPhysicalPages
LoadResource
GetVDMCurrentDirectories
GetDriveTypeW
GetVersion
Heap32Next
EnterCriticalSection
EnumTimeFormatsA
SetCommConfig
ReplaceFile
GetDiskFreeSpaceExA
GetConsoleAliasW
Sections
code Size: 8KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ