Static task
static1
Behavioral task
behavioral1
Sample
331bdcfeb387ad1332c063b61e8f384d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
331bdcfeb387ad1332c063b61e8f384d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
331bdcfeb387ad1332c063b61e8f384d_JaffaCakes118
-
Size
47KB
-
MD5
331bdcfeb387ad1332c063b61e8f384d
-
SHA1
151a16362d4f2d4173702be5fbcd2e05174858c8
-
SHA256
9f09096da6428d7c2a02259407e0b5ac1afeece8068981042743c2a670c7cf46
-
SHA512
75400bf35aee5e3d1e0a20a97d4304ffa4750bedbabb9ee4c779e9b2ad6ef4fa6e7d8c65683aa64dd37e3ed55607e53249157e8770491092ced847c5084d7217
-
SSDEEP
768:UYOoBxY5PM+MjgDvA70pcALdsLJjEEsWZmoR2y2WMEmEqjcuEFSiS:UFIytVMjqcALdkx1GwUEqjfuS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 331bdcfeb387ad1332c063b61e8f384d_JaffaCakes118
Files
-
331bdcfeb387ad1332c063b61e8f384d_JaffaCakes118.exe windows:4 windows x86 arch:x86
db4ac73883d093a883c57502cfb880f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateIcon
GetCursor
DialogBoxParamW
GetFocus
CloseWindow
CopyRect
DrawIcon
GetMenu
kernel32
GetACP
LCMapStringA
GetStringTypeW
SetFilePointer
GetStartupInfoA
lstrcpynA
SetHandleCount
lstrcpyA
lstrcpynW
GetModuleFileNameA
GetVersion
WriteFile
MultiByteToWideChar
GetFileType
GetStdHandle
lstrcatA
GetCurrentProcess
TerminateProcess
CreateFileA
GetOEMCP
LCMapStringW
advapi32
RegEnumValueA
RegEnumKeyExA
RegEnumKeyW
RegOpenKeyA
RegQueryValueW
RegQueryValueExW
RegEnumValueW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ