Static task
static1
Behavioral task
behavioral1
Sample
571351c2723e6df618b8f69fa371701d_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
571351c2723e6df618b8f69fa371701d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
571351c2723e6df618b8f69fa371701d_JaffaCakes118
-
Size
132KB
-
MD5
571351c2723e6df618b8f69fa371701d
-
SHA1
86720c77035fd66932459e2c74371ce8a86d94b4
-
SHA256
d70480b83fa91a7e7636ec216a4e927ab7bb8e84edd02930d723c4cc63207c28
-
SHA512
8876ea836773f8778fe408007b9704aed7caf8af1734b87dab832efaff121901ceff8c3ed319f84a7b5f348afef1967815d1125371ae6a107ee93ef56089c50d
-
SSDEEP
3072:fbvmqNctiyEKECfTjR0Kk9yx46qhyvLf1LCqxBJlxa:fbPnKECfnR0hyx4HIrEor
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 571351c2723e6df618b8f69fa371701d_JaffaCakes118
Files
-
571351c2723e6df618b8f69fa371701d_JaffaCakes118.exe windows:4 windows x86 arch:x86
36f3f108ca5146f72b60081aaba0aa8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
CreateFileW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetFileTime
GlobalAlloc
GetHandleInformation
ExitProcess
GetProcAddress
GetModuleHandleA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
RtlUnwind
GetLocaleInfoA
WideCharToMultiByte
VirtualAlloc
HeapReAlloc
user32
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
GetMessageW
advapi32
RegSetValueW
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ