Static task
static1
Behavioral task
behavioral1
Sample
32864f011911c8ec97dce1e04b2edf44_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32864f011911c8ec97dce1e04b2edf44_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32864f011911c8ec97dce1e04b2edf44_JaffaCakes118
-
Size
31KB
-
MD5
32864f011911c8ec97dce1e04b2edf44
-
SHA1
9056d8735080d3ae1e88f03be2343d1275227b38
-
SHA256
46701bc520ed64f573e744029f6d6298084a5cd05159179e214db8f72e7288c1
-
SHA512
616dbe645a0a2c0864a0dc98ff188d1c82f266eb9666471272aac0ce4e96575efa7f2e99b10da0643935493817155c5b149e2d6e34a98e8d5fa3b91235bbd955
-
SSDEEP
768:8sMjYe/I7LHEIaHKlKVHoDNtvIaiYG6o+:8se/I7LXaHKMVIbI5fd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32864f011911c8ec97dce1e04b2edf44_JaffaCakes118
Files
-
32864f011911c8ec97dce1e04b2edf44_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8511530be9afd8bfa9fdbd505315c57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
SetEvent
OpenEventA
GetFileAttributesA
GetTempPathA
GetLastError
WriteFile
CreateFileA
FileTimeToSystemTime
GetModuleFileNameA
lstrcatA
WaitForSingleObject
CloseHandle
DeleteFileA
ExitThread
TerminateThread
GetTickCount
ResetEvent
WaitForMultipleObjects
lstrcmpA
CreateToolhelp32Snapshot
Process32First
CompareStringA
lstrcpyA
FindResourceA
LoadResource
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
Sleep
PulseEvent
FreeLibrary
lstrlenA
MultiByteToWideChar
GetLocalTime
CreateThread
CreateEventA
OpenProcess
TerminateProcess
ExitProcess
ReadFile
HeapFree
HeapAlloc
RtlUnwind
user32
SetWindowTextA
ShowWindow
GetParent
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
RegisterClassA
CreateWindowExW
DefWindowProcA
PostQuitMessage
DestroyWindow
MessageBoxA
CreateWindowExA
CharToOemA
LoadIconA
FindWindowA
wsprintfW
wsprintfA
AnyPopup
EndPaint
advapi32
RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExW
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegNotifyChangeKeyValue
shell32
ShellExecuteA
SHGetFolderPathA
Shell_NotifyIconA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SysAllocString
SysFreeString
wininet
InternetGetConnectedState
HttpQueryInfoA
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ