Static task
static1
Behavioral task
behavioral1
Sample
454a00ff48fa8b184fd76a8b6cd0359f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
454a00ff48fa8b184fd76a8b6cd0359f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
454a00ff48fa8b184fd76a8b6cd0359f_JaffaCakes118
-
Size
32KB
-
MD5
454a00ff48fa8b184fd76a8b6cd0359f
-
SHA1
c1df1bfce59a5c27d4b45ead89aae74783de4e66
-
SHA256
1af048ead3c883155f47e53442c240635fd28bce338bb5b49c09996afdccfc09
-
SHA512
a45767f9145b29f780b010f2fa76799828b15baa03d61e690a6bb26c5573f7683e6f0e18841be96bc64d3a07bb449e660404c7615a3c0da4174a439759cbef47
-
SSDEEP
384:Qn8NgTTYSyk0ml9SiLgJAkWnYyS+8sNrKIPERJ6yoW:QTYAUi06nYR+rLPEnjo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 454a00ff48fa8b184fd76a8b6cd0359f_JaffaCakes118
Files
-
454a00ff48fa8b184fd76a8b6cd0359f_JaffaCakes118.exe windows:4 windows x86 arch:x86
224fac26d34a9b317a74af7d446f9056
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
WriteFile
GetModuleHandleA
WaitForSingleObject
CreateProcessA
CloseHandle
GetSystemDirectoryA
DeleteFileA
Sleep
GetFullPathNameA
GetCurrentDirectoryA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
HeapFree
HeapAlloc
GetLocalTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetLastError
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
GetDriveTypeA
wininet
InternetOpenUrlA
HttpQueryInfoA
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
InternetOpenA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE