Static task
static1
Behavioral task
behavioral1
Sample
04a0403c405012661401ddeddb8373bb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04a0403c405012661401ddeddb8373bb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
04a0403c405012661401ddeddb8373bb_JaffaCakes118
-
Size
12KB
-
MD5
04a0403c405012661401ddeddb8373bb
-
SHA1
08e50fb59c2ee0ff272ca10d534a15def6ca498b
-
SHA256
bd3df7374a99d7d964d9be69353ae4a00f504fff00f06b2db9e4cc0d514f65ef
-
SHA512
7382f929549a79c97ad62d45036ef109742705da032120ffd3abd980125c9d63c07b5abfd86ce91a09e3e10f9f6b306a0428f6a92d3989e2871638ed49b7b185
-
SSDEEP
192:9cwsKb/quLlQCVVlQ9Dan/ZP1oynI2N0sOxBbc9O/I8aal1uZstXwh:ewsKn+Ce9D4/l1bSVbcsZX9XM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04a0403c405012661401ddeddb8373bb_JaffaCakes118
Files
-
04a0403c405012661401ddeddb8373bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
c75a848b27b10f2e1fe2c4ea339166ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CloseHandle
GetTickCount
GetLongPathNameA
GetTempPathA
TerminateProcess
WaitForSingleObject
FreeLibrary
GetVersionExA
LocalAlloc
DeleteFileA
LocalFree
GetStartupInfoA
user32
KillTimer
LoadIconA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
DefWindowProcA
PostQuitMessage
LoadCursorA
RegisterClassExA
CreateWindowExA
SetTimer
LoadAcceleratorsA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
shell32
Shell_NotifyIconA
msvcrt
fopen
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
sprintf
strtok
fclose
fwrite
_exit
strncmp
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ