Static task
static1
Behavioral task
behavioral1
Sample
2507df15994b4cd2de3358af357fdaad_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2507df15994b4cd2de3358af357fdaad_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2507df15994b4cd2de3358af357fdaad_JaffaCakes118
-
Size
64KB
-
MD5
2507df15994b4cd2de3358af357fdaad
-
SHA1
68c34294860d9c8a14674f40ebcf78a95b97b0a5
-
SHA256
79274aad5fd686681e8a51428a6180f63cf828ae0116ec54636bc8cea77eef5b
-
SHA512
746cdc00f5738682b1d7cc66af188061ee38fcb173cbedabded80ed93fe4118dac0c467851afeefa5a4f5099a7ff744e57453f4c5de3731c75fad7bfa383c296
-
SSDEEP
1536:eYsMY07X5WDRIK3e8QeCv42HSWpPQeuoFffOs:W4ERIKFCHnPQex59
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2507df15994b4cd2de3358af357fdaad_JaffaCakes118
Files
-
2507df15994b4cd2de3358af357fdaad_JaffaCakes118.exe windows:4 windows x86 arch:x86
628ace93066105e50dfbbfde733a984d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CloseHandle
CreateMutexA
ReleaseMutex
WaitForSingleObject
ReadFile
WriteFile
CreateFileA
SetPriorityClass
GetCurrentProcess
GetTickCount
SetThreadPriority
GetCurrentThread
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualFree
LocalAlloc
VirtualAlloc
MapViewOfFileEx
CreateFileMappingA
OpenFileMappingA
VirtualProtect
MapViewOfFile
SearchPathA
FreeLibrary
ExitProcess
CreateProcessA
CopyFileA
GetFileAttributesA
GetFullPathNameA
lstrcatA
GetSystemDirectoryA
GetLastError
DeleteFileA
GetCommandLineA
ExpandEnvironmentStringsA
GetShortPathNameA
GetTempPathA
GetVersionExA
WriteProcessMemory
OpenProcess
lstrcpynA
GetComputerNameA
lstrcpyA
LocalFree
lstrcmpiA
HeapFree
GetProcessHeap
HeapAlloc
UnmapViewOfFile
Sleep
user32
RegisterClassA
wsprintfA
DefWindowProcA
advapi32
RegQueryValueExA
RegConnectRegistryA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
GetUserNameA
RegOpenKeyExA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.plugins Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ