Static task
static1
Behavioral task
behavioral1
Sample
4525eb3680f3493cdf7d7f48d28fcb77_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4525eb3680f3493cdf7d7f48d28fcb77_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4525eb3680f3493cdf7d7f48d28fcb77_JaffaCakes118
-
Size
201KB
-
MD5
4525eb3680f3493cdf7d7f48d28fcb77
-
SHA1
2cb7265a743967fa06ba989e03169d998763c926
-
SHA256
6c4ca7d5304494660ca08220c8260e48059ebf86ed1b2685f5f8ad0c9fa5332a
-
SHA512
585c858a5752df84b565ed30c1a87a1810ac695a2189c5c2fb2a59fdb4fec06085c6cb53125a83283829a2cb7f465c11c1ce4fe3a0d2ef7d6fe801002de19a52
-
SSDEEP
3072:ZPWcfjDUHCvaiXySiORdVY9LF/TaQpcf0aL1f:ZPdpQ/Op61Wj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4525eb3680f3493cdf7d7f48d28fcb77_JaffaCakes118
Files
-
4525eb3680f3493cdf7d7f48d28fcb77_JaffaCakes118.exe windows:5 windows x86 arch:x86
ab1e1236210df1b2758d50803993bbf5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetCommandLineA
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE