Static task
static1
Behavioral task
behavioral1
Sample
f424a9ed4deba10ff8595935797d0f34_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f424a9ed4deba10ff8595935797d0f34_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f424a9ed4deba10ff8595935797d0f34_JaffaCakes118
-
Size
55KB
-
MD5
f424a9ed4deba10ff8595935797d0f34
-
SHA1
e97742ca79a3a9b1375cfd11e2ebbc0ba7fc4bb5
-
SHA256
1f3b3a8020740186a5957062764ff0e3d0abd82c33aa56df1e12b9f6cbb4a574
-
SHA512
5e33e1cfbed13fd7539b063d480853f4cd2899b66dfe7f5acd44879c4f745f675971bd09383971fff8455147c14595bcdf77bfd198ef84ffa8f1cc03ebf1b9b3
-
SSDEEP
1536:bNooVrd3bLQSpqxTuL/rhPfnt9Vb6ZdusCI:553bLQuqxTublXtquNI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f424a9ed4deba10ff8595935797d0f34_JaffaCakes118
Files
-
f424a9ed4deba10ff8595935797d0f34_JaffaCakes118.exe windows:4 windows x86 arch:x86
c76ad415ba4f8a09cbe7833ecf981485
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZClose
LZOpenFileA
LZCopy
kernel32
GlobalFree
CloseHandle
ExitProcess
LoadResource
GetCurrentProcess
WaitForSingleObject
GetTickCount
SetFileTime
GetCommandLineA
OpenProcess
FindResourceExA
SizeofResource
CreateProcessA
GetSystemDirectoryA
lstrcatA
lstrlenW
FlushFileBuffers
CreateDirectoryA
GetStartupInfoA
CopyFileA
LockResource
GetModuleFileNameA
GetVersionExA
LoadLibraryA
GetFileInformationByHandle
GetTempPathA
DeleteFileA
lstrcpyA
HeapFree
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
TerminateProcess
RtlUnwind
InterlockedExchange
VirtualQuery
GlobalAlloc
WriteFile
lstrlenA
CreateFileA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTempFileNameA
GetCurrentProcessId
user32
wsprintfW
wsprintfA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ