Static task
static1
Behavioral task
behavioral1
Sample
251eee153d331f299f42cc14e6bf45dd_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
251eee153d331f299f42cc14e6bf45dd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
251eee153d331f299f42cc14e6bf45dd_JaffaCakes118
-
Size
173KB
-
MD5
251eee153d331f299f42cc14e6bf45dd
-
SHA1
ab5d22c7ed2b74dcf68c4cec51cbd74115668c3e
-
SHA256
1a09e04695454ad65221f31d618a3f26103e6a4b45d98d7d00b52f0f78de36e9
-
SHA512
1c6e695dc2c9dbc8d60234d8805fb54a5e2121f356dc0550ebd334a937f10a8501ba8ce3e2d01a408e186a4a2e490ac209c1d1b44d282fb2ecc68696922bc5f4
-
SSDEEP
3072:g1Klt0EVxW5ZkLJMtJTlIbPhQjmUYYXSVNsYyXID9F8IoLoeiCODrur/Nht:jzcWJETlshQmUDCVN+49lPDyr/N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 251eee153d331f299f42cc14e6bf45dd_JaffaCakes118
Files
-
251eee153d331f299f42cc14e6bf45dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
5945a318d4d12d5144c1c8fa21f5bfb3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
GetCurrentThreadId
LocalAlloc
GetAtomNameW
GetLocaleInfoW
QueryPerformanceCounter
lstrlenW
InterlockedCompareExchange
lstrlenA
CreateProcessW
RaiseException
GetSystemTimeAsFileTime
GetACP
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
EnumResourceNamesA
GetStartupInfoW
UnhandledExceptionFilter
GetModuleHandleW
QueryMemoryResourceNotification
MultiByteToWideChar
GetEnvironmentVariableW
WideCharToMultiByte
TerminateProcess
GetCurrentProcessId
InterlockedExchange
GetTickCount
GetThreadLocale
winmm
mciSendCommandA
sndPlaySoundA
shlwapi
PathAddBackslashA
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ