Static task
static1
Behavioral task
behavioral1
Sample
319426397df5a93ef6bf609b97a84ec1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
319426397df5a93ef6bf609b97a84ec1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
319426397df5a93ef6bf609b97a84ec1_JaffaCakes118
-
Size
49KB
-
MD5
319426397df5a93ef6bf609b97a84ec1
-
SHA1
08d913b4159a96f39cb3b35b94a196e912d1e9bb
-
SHA256
756830300d67b2b334a37bce3024f22f5603c18874125205bc7327df3122d11e
-
SHA512
5971e729c0cef9891dd865c5fe6d062ee7e6b4d1b7ae55d6aadef4834c2c0b1012fc6d79e7ccf96ce0bd2905e95de181f117368f440ea68660b99e326b7e3fc1
-
SSDEEP
768:6P+5bVp3GegZ8F8E1dr54Xq2h2jnbL/mu1jKvC:f5bVp3ngZ8hT5462h0n//mu1kC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 319426397df5a93ef6bf609b97a84ec1_JaffaCakes118
Files
-
319426397df5a93ef6bf609b97a84ec1_JaffaCakes118.exe windows:4 windows x86 arch:x86
d4311fc1ce21cf51f17ab3acac46b9ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
WinExec
GetFileAttributesA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCommandLineA
CopyFileA
GetCurrentProcess
CreateThread
GetModuleFileNameA
ExitProcess
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CreateDirectoryA
GetLastError
RtlUnwind
GetWindowsDirectoryA
GetPrivateProfileStringA
lstrcmpA
Sleep
lstrcpyA
lstrcmpiA
CreateFileA
WriteFile
SetFileAttributesA
CloseHandle
advapi32
RegQueryValueExA
RegCreateKeyA
RegCloseKey
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegOpenKeyA
shell32
ShellExecuteA
user32
MessageBoxA
GetClassNameA
GetWindowLongA
GetForegroundWindow
EnumChildWindows
SendMessageA
GetWindowTextA
IsWindow
ws2_32
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE