Static task
static1
Behavioral task
behavioral1
Sample
a45dbc6dfae08ad01e1d11c0e8f69a31_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a45dbc6dfae08ad01e1d11c0e8f69a31_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a45dbc6dfae08ad01e1d11c0e8f69a31_JaffaCakes118
-
Size
93KB
-
MD5
a45dbc6dfae08ad01e1d11c0e8f69a31
-
SHA1
8d42375eb1f38bbd692aab2810549b051b68a0fa
-
SHA256
e9e23726b4a7451ba5eefc9ec90c1ea897046bde4ed13de419d9dace59f6dabc
-
SHA512
253d7edc17e9a4339efc0812e0582791c8dbfab80db2973232da5bc00ba1fa9f4ac8cb6e181ba0fd1d90ec2469af070f3b89666767c19b39355bace78b767b04
-
SSDEEP
1536:Z8I5zikGDU3YpVhzLLpcJCUZgp2kepphlBbhJOcrHuTcWNS:+MGkcwuVhvLeCEPkepPfhJjHU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a45dbc6dfae08ad01e1d11c0e8f69a31_JaffaCakes118
Files
-
a45dbc6dfae08ad01e1d11c0e8f69a31_JaffaCakes118.exe windows:5 windows x86 arch:x86
d71852a2633f383493a9c72f871d6a75
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
NdrClientCall2
kernel32
GetLastError
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
WaitForMultipleObjects
CloseHandle
lstrcmpiW
OpenMutexW
GetModuleFileNameW
ExpandEnvironmentStringsW
GetDriveTypeA
GetSystemDirectoryW
VirtualUnlock
GetComputerNameW
MultiByteToWideChar
GetTickCount
lstrcmpiA
EnterCriticalSection
LeaveCriticalSection
VirtualLock
GetProcAddress
WriteFile
GetSystemTime
ExitThread
GetModuleHandleW
CreateFileW
GetVolumeInformationW
WideCharToMultiByte
VerSetConditionMask
LoadLibraryA
GetModuleHandleA
ExitProcess
GlobalAlloc
GlobalFree
LocalAlloc
MulDiv
GetTempPathW
VirtualQuery
LoadLibraryW
LoadLibraryExW
ReadFile
ConnectNamedPipe
CreateEventW
CreateNamedPipeW
GetFullPathNameW
GetCurrentProcess
GetShortPathNameW
GetProcessHeap
VirtualFree
VirtualAlloc
lstrlenW
Sleep
lstrcmpW
VerifyVersionInfoW
user32
GetDC
ReleaseDC
FillRect
wsprintfW
DrawTextW
DrawTextA
wsprintfA
gdi32
SetBitmapBits
GetBitmapBits
CreateBitmap
GetObjectW
SetTextColor
SetPixel
CreateCompatibleDC
CreateFontW
DeleteDC
DeleteObject
GetDeviceCaps
GetDIBits
GetPixel
GetStockObject
SelectObject
SetBkColor
CreateCompatibleBitmap
ole32
CoUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ