Static task
static1
Behavioral task
behavioral1
Sample
09a983c85fcd93eff141dc458368f9f5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09a983c85fcd93eff141dc458368f9f5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09a983c85fcd93eff141dc458368f9f5_JaffaCakes118
-
Size
312KB
-
MD5
09a983c85fcd93eff141dc458368f9f5
-
SHA1
8d3f3bea9db38cf793a98642d77f89b07abebef2
-
SHA256
31af691708c12e49b84ebb3d2bf9e51e790ae78e277ecc7a7527b5c9ef6348e8
-
SHA512
8ac58ce9612ca78daaef326977589cceb50dc7540ff21c88706b5f06bb079ff3b7ed613a1f967ab7ec09cf10bb14cc639fd8f798cb28b6894975ab6a4506ad38
-
SSDEEP
6144:ATcHIKDss8DWBaGi8Dk8CNe/QebY1vW1SR:poKDz8asiDZbIe0/R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09a983c85fcd93eff141dc458368f9f5_JaffaCakes118
Files
-
09a983c85fcd93eff141dc458368f9f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
6be4d7bd97e00c74c48b754ee21535bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA
LoadLibraryA
ExitProcess
user32
CreateWindowExA
CloseWindow
SetWindowLongA
CharLowerBuffA
wsprintfA
advapi32
RegCloseKey
RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyA
RegCreateKeyA
Sections
.text Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ