Static task
static1
Behavioral task
behavioral1
Sample
283a451f7af245c8661281d38af80c83_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
283a451f7af245c8661281d38af80c83_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
283a451f7af245c8661281d38af80c83_JaffaCakes118
-
Size
480KB
-
MD5
283a451f7af245c8661281d38af80c83
-
SHA1
6114af9fa60c0cc3d8e68da79aec20ee5b98388b
-
SHA256
6b4873002d634c6fb95365e155e4c04f0e1e8d00d5bf2efa4f49983ceee76801
-
SHA512
56dca00c2f69391b39488defccdbedfa8e2c0da665e433f4c5fbf0e1faab43afd1c835ba1885ba7d4e7f4af264df15e1aa7e1b8eb756901fed13cb9a79ee8970
-
SSDEEP
12288:uRv3sTbz5eilM0dTz7Myg5DKDM5ubuZCW:uB3sPz5qCTHcuDM5/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 283a451f7af245c8661281d38af80c83_JaffaCakes118
Files
-
283a451f7af245c8661281d38af80c83_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3082620fcaaff56ea0144da2aed839e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
ExitProcess
LocalAlloc
LocalFree
CreateFileA
SetFilePointer
CloseHandle
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
WriteFile
DeleteFileA
CreateDirectoryA
GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
lstrcpyA
lstrcpynA
lstrcatA
lstrlenA
user32
MessageBoxA
shell32
ShellExecuteA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.D�ذ�0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.D�ذ�1 Size: 469KB - Virtual size: 473KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.D�ذ�2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.D�ذ�! Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE