Static task
static1
Behavioral task
behavioral1
Sample
100a4ce69ec11e255b57d948f93dfd35_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
100a4ce69ec11e255b57d948f93dfd35_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
100a4ce69ec11e255b57d948f93dfd35_JaffaCakes118
-
Size
111KB
-
MD5
100a4ce69ec11e255b57d948f93dfd35
-
SHA1
fc69abb09392ca62341444e12806a7c4ad6b3370
-
SHA256
fe9cb3d5d0735732adbe847f19585f447152584bb2c5f30424a003f23e191747
-
SHA512
476523270b408a4feb95d73119392a02bb69e07314cde2c9d7405500c15210d3b07b49026db1b2a36ebf5c2e5299cea428ad8aa9f4dfa7320cca2e669f786783
-
SSDEEP
3072:D8m2sE41lPif/z8D7C421QsBFaWTsGNA0kGpS6dqmFbSikC:D8Fs1PifQXCdBFPJUGrBbSRC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 100a4ce69ec11e255b57d948f93dfd35_JaffaCakes118
Files
-
100a4ce69ec11e255b57d948f93dfd35_JaffaCakes118.exe windows:4 windows x86 arch:x86
64bc9219a31e011ab17d7969582ff6bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
LockResource
CloseHandle
GetStartupInfoA
advapi32
GetUserNameA
msvcrt
strcmp
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 930B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ