Static task
static1
Behavioral task
behavioral1
Sample
034160ce855caae7ef1bc1f0c7dd629b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
034160ce855caae7ef1bc1f0c7dd629b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
034160ce855caae7ef1bc1f0c7dd629b_JaffaCakes118
-
Size
1.3MB
-
MD5
034160ce855caae7ef1bc1f0c7dd629b
-
SHA1
952b21b9597590a24d2be5edde739ccda10dcd89
-
SHA256
5c6d0019a3bebe08456dbf6cb9e426f1ba6bab3929e5d9f24af93e24599fb47d
-
SHA512
60c48586c4338fa17b91501db94255ae90bff1bc3b49a44f4cba06aa4e0f0310f8d7e23cc64da5adea4dcf5a0dc4f7b953ee056b136d7ab371aa0423218848f5
-
SSDEEP
24576:IgE6ZLkal1LZ1x9hHnxhPOsKqEVydZZ5s/OvJ+FKIO3qu9c573epqog:IgEaLpX/VHnxhWtqn57+MV3quueI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 034160ce855caae7ef1bc1f0c7dd629b_JaffaCakes118
Files
-
034160ce855caae7ef1bc1f0c7dd629b_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d822e703163f50bbd66f901ffaa8e88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
SetFilePointer
CreateFileA
ReadFile
GetLastError
WriteFile
GetProcessHeap
HeapFree
lstrcpyA
GetFileAttributesA
lstrlenA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
CloseHandle
DosDateTimeToFileTime
CreateDirectoryA
RemoveDirectoryA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
HeapAlloc
SearchPathA
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetTempPathA
lstrcmpiA
lstrcatA
SetCurrentDirectoryA
user32
SendMessageA
GetDlgItem
MessageBoxA
PeekMessageA
CharNextA
LoadStringA
CharPrevA
CreateDialogParamA
DestroyWindow
shell32
ShellExecuteExA
comctl32
ord17
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 298B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ