Static task
static1
Behavioral task
behavioral1
Sample
b7fa4173cf694f53a2597e9eca21ab4c_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
b7fa4173cf694f53a2597e9eca21ab4c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
b7fa4173cf694f53a2597e9eca21ab4c_JaffaCakes118
-
Size
152KB
-
MD5
b7fa4173cf694f53a2597e9eca21ab4c
-
SHA1
863c998dcb57fa9c53bd0d156866a9b42298cbd0
-
SHA256
76c24af9d020303e0a87c89305cec56dbff19170edf4133a00141ad0ecce510b
-
SHA512
77ddd99e4be2d4126923450515ffd193971ef88c70a7b576571fcb767ac4792f9536e34a068fc9d81e9baf781ff907c130bac573fff894daf861632b70e0370a
-
SSDEEP
3072:Teak8bc8G9lQPfzK1+YpY/VRb9kdRfIbKewo8J:TW18GDVps1kdRf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7fa4173cf694f53a2597e9eca21ab4c_JaffaCakes118
Files
-
b7fa4173cf694f53a2597e9eca21ab4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
339a88487b46cd459b3c2c6bc1d26ff6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
BuildCommDCBA
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetLastError
CreateFileA
ReadFile
MultiByteToWideChar
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW
user32
CreateDialogParamA
ChildWindowFromPoint
GetWindowRect
IsZoomed
GetSystemMenu
GetKeyboardType
CreateMenu
DlgDirListA
gdi32
CreateRoundRectRgn
SetMapMode
CreatePalette
SetTextCharacterExtra
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE