Static task
static1
Behavioral task
behavioral1
Sample
30436f414a1af015ac864c53d696e23f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30436f414a1af015ac864c53d696e23f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30436f414a1af015ac864c53d696e23f_JaffaCakes118
-
Size
44KB
-
MD5
30436f414a1af015ac864c53d696e23f
-
SHA1
d6c0f8cffd0d980ddf39bbd978c5f1530f1d059d
-
SHA256
09325dd48be98393a48427226652473792d9417b5e4462534404c91d9582d7db
-
SHA512
fb4e3373a7b1d44b51877231155c8f77106c647f3d3661dca4d10161300e1f5a45993363cd9cf6ae7b2d89e9090e669ea0d88ac8c5de4ea959ca043afae9b896
-
SSDEEP
384:th73+ZuNyJy1++NMEUlHMwqE6xF9nZXFKYK51xDWhFXM:tVOODShHMRx3ZG5rDWn8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30436f414a1af015ac864c53d696e23f_JaffaCakes118
Files
-
30436f414a1af015ac864c53d696e23f_JaffaCakes118.exe windows:4 windows x86 arch:x86
81a18d27f03bdbb143ed6e5377411606
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
LocalAlloc
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
GetLastError
GetStartupInfoA
user32
MessageBoxA
msvcrt
_adjust_fdiv
??2@YAPAXI@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE