Static task
static1
Behavioral task
behavioral1
Sample
f24078d95bc51ce4cefad1f27ac95eca_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f24078d95bc51ce4cefad1f27ac95eca_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
f24078d95bc51ce4cefad1f27ac95eca_JaffaCakes118
-
Size
148KB
-
MD5
f24078d95bc51ce4cefad1f27ac95eca
-
SHA1
4858928c668f3c5bcfa977c40bf782f407e4c2e1
-
SHA256
5ccebdec12e9e4d79a3fc39cd4e6befe576504f5f4e9adaa5df721ea0a4e0c1a
-
SHA512
cd8a35db03d66a545b9ce8bf3495d64faa485751c2174f990696d2aecd2db0732f8962e57e3f32ea8b6ea42258fdf0cc0d662db79a46b6c173046762782c8499
-
SSDEEP
3072:IuJOBwlmaDKpAVICZEFO0v8hp+pRhtlfplt1c/qOQH3Xdtzn1GEDnv:DUwVupAJKUM7tlfzwqNIEDn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f24078d95bc51ce4cefad1f27ac95eca_JaffaCakes118
Files
-
f24078d95bc51ce4cefad1f27ac95eca_JaffaCakes118.exe windows:4 windows x86 arch:x86
2042ba03a20ce09219ac3eb4e55cd7bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileInformationByHandle
CloseHandle
WaitForSingleObject
GetFileAttributesA
VirtualFree
GetCommandLineA
SetCurrentDirectoryW
GetSystemDefaultLCID
GetModuleHandleA
GetProcAddress
Beep
ReadConsoleA
GetStartupInfoA
CreateDirectoryA
IsValidCodePage
SetLocalTime
InitializeCriticalSection
DeleteCriticalSection
GetSystemDefaultLangID
GetModuleFileNameA
GetStdHandle
FindNextFileW
GetNumberOfConsoleInputEvents
GetDriveTypeA
GetLocalTime
SetFileAttributesA
DeleteFileA
MultiByteToWideChar
FindFirstFileW
SetConsoleCtrlHandler
FileTimeToLocalFileTime
GetCurrentDirectoryA
DeleteFileW
GetTimeZoneInformation
CreateFileA
FindClose
SetFilePointer
SetEnvironmentVariableA
GetFullPathNameW
GetCurrentThread
SetUnhandledExceptionFilter
SetEnvironmentVariableW
GetCPInfo
PeekConsoleInputA
IsBadCodePtr
GetExitCodeProcess
QueryPerformanceCounter
GetFullPathNameA
GetDriveTypeW
IsBadWritePtr
GetLogicalDrives
TlsGetValue
GetConsoleMode
SetFileTime
SetStdHandle
SetEndOfFile
FileTimeToSystemTime
UnlockFile
ReadConsoleInputA
GetCurrentProcess
RemoveDirectoryA
GetEnvironmentStrings
WriteFile
GetDiskFreeSpaceA
WriteConsoleA
FindFirstFileA
RaiseException
SetCurrentDirectoryA
RtlUnwind
LocalFileTimeToFileTime
CreateDirectoryW
ReadFile
SetFileAttributesW
DuplicateHandle
SystemTimeToFileTime
GetFileType
EnterCriticalSection
TlsAlloc
FlushFileBuffers
FindNextFileA
GetACP
LeaveCriticalSection
SetErrorMode
FreeLibrary
LoadLibraryW
GetLastError
WideCharToMultiByte
GetCurrentDirectoryW
GetModuleFileNameW
GetUserDefaultLCID
CreatePipe
LockFile
CreateFileW
GetVersion
SetConsoleMode
GetFileAttributesW
IsBadReadPtr
RemoveDirectoryW
ResumeThread
CreateThread
TlsSetValue
user32
MessageBoxA
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ