Static task
static1
Behavioral task
behavioral1
Sample
1b10c73b09d6ca18776eb054c5d2cb94_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b10c73b09d6ca18776eb054c5d2cb94_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b10c73b09d6ca18776eb054c5d2cb94_JaffaCakes118
-
Size
213KB
-
MD5
1b10c73b09d6ca18776eb054c5d2cb94
-
SHA1
e4519adff623cc83c64acba4067365d91ddd3f9b
-
SHA256
5364a1259aae2a6dc272776929cf40c71514f0707cc47258b22cba766a052e17
-
SHA512
b691eb26be0091890726e2824157f8b810eb484ddd68e37de28fe00cfbc412036708fded15e9f77542cf8768a4e8331e9c6bfbd90102facf51a343ffc8e887b2
-
SSDEEP
3072:vAzEY2CU/MmeZ5cF6EdU5/aEykDwvh58FAnGf0JpZB38OgA+dJ2V7I+qv39qgwJi:YzF2CGRHU1NykxFAnGMbLuUq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b10c73b09d6ca18776eb054c5d2cb94_JaffaCakes118
Files
-
1b10c73b09d6ca18776eb054c5d2cb94_JaffaCakes118.exe windows:4 windows x86 arch:x86
8abdb16df753573a7dfbf1a15933f3f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegEnumValueW
RegOpenKeyExA
RegOpenKeyW
RegQueryValueW
RegSetValueA
kernel32
CloseHandle
CreateFileW
EnterCriticalSection
ExitProcess
InitializeCriticalSection
LeaveCriticalSection
ReadFile
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
clock
free
localtime
malloc
memcpy
mktime
signal
sprintf
sscanf
strcpy
strftime
time
wcscpy
user32
MessageBoxW
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE