Static task
static1
Behavioral task
behavioral1
Sample
54b113a41ad2126cb2117b6a3e789cb2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
54b113a41ad2126cb2117b6a3e789cb2_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
54b113a41ad2126cb2117b6a3e789cb2_JaffaCakes118
-
Size
214KB
-
MD5
54b113a41ad2126cb2117b6a3e789cb2
-
SHA1
18199911c5c006a2d3598d8c85750133a5eb0f37
-
SHA256
975f8a47bc86b60a12efccc60a2bb2f8e02bbb6cec78d918f26df82114870ca8
-
SHA512
009c65f9e721c3f9f6e2fc7431a482b48e5f30edd796341899cfd3d2e565a9ce32213a02e4a15f79127d9349e328d488a8a553fcc215df5de30c2ed1969d9070
-
SSDEEP
3072:sjdh27K4tfd81LgfoKO8DLxnYDgbACrs:snYFtdQ0nlhnDbFr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 54b113a41ad2126cb2117b6a3e789cb2_JaffaCakes118
Files
-
54b113a41ad2126cb2117b6a3e789cb2_JaffaCakes118.exe windows:5 windows x86 arch:x86
51aac3178f2769244f63b366b43df5ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
LocalFree
LoadLibraryA
GetVersion
Sleep
VirtualAllocEx
GetProcessHeap
GetModuleHandleA
GetLastError
FormatMessageA
GetModuleHandleW
CloseHandle
user32
CharToOemBuffA
LoadIconW
advapi32
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegEnumValueA
msvcrt
_XcptFilter
__getmainargs
__initenv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_iob
_setmode
_stricmp
_strupr
_ultoa
atoi
exit
fprintf
free
malloc
printf
realloc
sprintf
strchr
strncpy
strtol
toupper
Sections
.text Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ