Static task
static1
Behavioral task
behavioral1
Sample
45d3351d12c18faa06b57197a064e187_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
45d3351d12c18faa06b57197a064e187_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
45d3351d12c18faa06b57197a064e187_JaffaCakes118
-
Size
724KB
-
MD5
45d3351d12c18faa06b57197a064e187
-
SHA1
561fffe8b1ac5f0cd8959014ef10022ec0bcf7de
-
SHA256
15e0e370ea4741751a9754aa2d701b2d746369e4655f0197d4f1d013c079ebfd
-
SHA512
d2f713850488e00c35be2242228390375884a7f6e22d9bc99a9d06cf11ae8931a3df814a8f946f344c19055787c7f9dc0b7dd5920fdd179540a35e8fe0d50fe6
-
SSDEEP
12288:FdfddFYwAaaxwi9SPadfkIEIYgBWxuacNiMR0GCvFa+:FdfddLUxwOSadNEDCW3cobvt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45d3351d12c18faa06b57197a064e187_JaffaCakes118
Files
-
45d3351d12c18faa06b57197a064e187_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad67a1d9e980baea6227bb2f703580a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
GetFileSize
VirtualAlloc
GetTickCount
HeapAlloc
OpenSemaphoreW
CreateDirectoryA
InterlockedIncrement
SetFileAttributesW
TerminateProcess
GetCurrentThread
FindClose
GetCurrentThreadId
DeleteFileW
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
FlushFileBuffers
GetLastError
GetFileAttributesW
Sleep
GetCurrentDirectoryW
CreateMutexW
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
CloseHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
user32
ShowWindow
SetProcessWindowStation
CreateDesktopW
GetDC
DestroyWindow
GetDesktopWindow
GetClientRect
MessageBoxA
gdi32
CreatePen
advapi32
LookupAccountNameA
ole32
CoCreateInstance
oleaut32
SysFreeString
msacm32
acmFormatChooseW
winscard
SCardForgetReaderA
ws2_32
select
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 616KB - Virtual size: 619KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ