Static task
static1
Behavioral task
behavioral1
Sample
1b4ca2fbe300cf7f3f538bf4c69c738c_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1b4ca2fbe300cf7f3f538bf4c69c738c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1b4ca2fbe300cf7f3f538bf4c69c738c_JaffaCakes118
-
Size
21KB
-
MD5
1b4ca2fbe300cf7f3f538bf4c69c738c
-
SHA1
aeb7bdda1ef3ef235692adfe40066b52b1a4cefb
-
SHA256
c3eb398767ba95f10c85757b513851a57eb463c1576c4dce160890f1cd2a28a0
-
SHA512
0632156e97034d16f195b249a994b4d5209628261ebe274e532e767f31d2cb93e07bd6111ff825e8b4d899bdbca558e4b687571de1f9e8a89ffd3f65e901cd95
-
SSDEEP
384:3KZAzfrCHhftxFUbQP67EwWviH0yUNmsBNJYQeJPz7T2rn3kGcHrm/kD:u+frQ1CbQC7z3HrUNmsBNMriUGcHrj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b4ca2fbe300cf7f3f538bf4c69c738c_JaffaCakes118
Files
-
1b4ca2fbe300cf7f3f538bf4c69c738c_JaffaCakes118.exe windows:4 windows x86 arch:x86
94bac57d6e80e2250f75ad18ea9c9e17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryExW
ExitProcess
GetCurrencyFormatW
GetDiskFreeSpaceW
GetLocalTime
GetProfileIntA
HeapValidate
LeaveCriticalSection
LocalSize
MoveFileExA
SetHandleCount
VerLanguageNameW
advapi32
CryptEncrypt
CryptGenRandom
CryptGetProvParam
CryptSetKeyParam
CryptSetProviderExW
GetFileSecurityA
GetNamedSecurityInfoExW
IsValidAcl
RegDeleteKeyW
RegSetValueExW
RegUnLoadKeyW
SetSecurityInfoExA
StartServiceCtrlDispatcherA
user32
ChangeDisplaySettingsExA
DrawTextExA
GetProcessWindowStation
GetShellWindow
GetSystemMetrics
LoadKeyboardLayoutW
MsgWaitForMultipleObjects
RegisterClipboardFormatA
SetCursorPos
WINNLSEnableIME
wsprintfA
gdi32
CancelDC
CreateEllipticRgn
CreateRoundRectRgn
GetCharWidth32A
GetEnhMetaFileDescriptionA
GetLogColorSpaceW
SetMagicColors
SetMiterLimit
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE