Static task
static1
Behavioral task
behavioral1
Sample
1c44e44b5a8df6861cdba23fb55e85cb_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c44e44b5a8df6861cdba23fb55e85cb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c44e44b5a8df6861cdba23fb55e85cb_JaffaCakes118
-
Size
2.8MB
-
MD5
1c44e44b5a8df6861cdba23fb55e85cb
-
SHA1
c29ae12f296c2aa608b22d8ab800b0dc585a6107
-
SHA256
a71f4bbaa6f684a3df34c2b2e38c67190fc1962391c69131ee7a8406baa34eca
-
SHA512
fed4322152ba721510e50aaf7fa35c646308362daaa2e58a3705993311706ad755a0d31010fbc9d22ba7c7730944d4db9acb8295f447060eadc23afc35c744e3
-
SSDEEP
49152:Er6lAf2OJp3deTZJ9hDLy30D3lPWXu1cFd7RD/hGuyKq2xs2WtRD71iNr:i/TFUTzFWXZFhRYb2exi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c44e44b5a8df6861cdba23fb55e85cb_JaffaCakes118
Files
-
1c44e44b5a8df6861cdba23fb55e85cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0602f23a95b9aba04f62af39ed6cff6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalReAlloc
GetTempPathA
WriteFile
CloseHandle
GetFileType
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CreateProcessA
lstrlenA
ExitProcess
FreeLibrary
GlobalAlloc
GetModuleFileNameA
LoadLibraryA
GetWindowsDirectoryA
DeleteFileA
GetExitCodeProcess
Sleep
GetCurrentDirectoryA
GetCommandLineA
AreFileApisANSI
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
ReadFile
SetFilePointer
GetFileSize
FormatMessageA
FindFirstFileA
FindNextFileA
CreateDirectoryA
FindClose
user32
MessageBoxA
wsprintfA
shell32
ShellExecuteExA
advapi32
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ