Static task
static1
Behavioral task
behavioral1
Sample
17840b4e225e1e9aead6013ddd8318a9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17840b4e225e1e9aead6013ddd8318a9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17840b4e225e1e9aead6013ddd8318a9_JaffaCakes118
-
Size
48KB
-
MD5
17840b4e225e1e9aead6013ddd8318a9
-
SHA1
d36e79dd9e01e7a87ff5563b20cc1fceaaf83165
-
SHA256
d6f842a48ef48583592e7dd62c1117006002fbcb67c0b420b2bbc114b9fc2bca
-
SHA512
f12970da9c8337a9ac646bb745dcf5021e545dd235404d6a4bad7371c75bbae188c4f3e28c7827f2a66a6afcbda8840519ec1e5074dd7055ec4f1b3c3f45b796
-
SSDEEP
768:caodLAylZphKNTgdtlLW8LI8QfI5EmURIAuoT/bmyfyA+mgX4RO:todtZfKGTRQfPHnR3JOsO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17840b4e225e1e9aead6013ddd8318a9_JaffaCakes118
Files
-
17840b4e225e1e9aead6013ddd8318a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8e6a7f2865610045ae8d4a245040cd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
CloseHandle
lstrcmpiA
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
ExitProcess
ReadFile
SetFilePointer
CreateFileA
FreeResource
WriteFile
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
WinExec
GetLastError
CreateMutexA
Sleep
CreateThread
GetCurrentThreadId
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strchr
_except_handler3
malloc
realloc
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE