Static task
static1
Behavioral task
behavioral1
Sample
338229551bfde46a156fd0268e3f935a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
338229551bfde46a156fd0268e3f935a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
338229551bfde46a156fd0268e3f935a_JaffaCakes118
-
Size
18KB
-
MD5
338229551bfde46a156fd0268e3f935a
-
SHA1
36f5801e8445fd676ed6f58aee9a5e671ca73e0c
-
SHA256
d756ff6a0527c9fc9c0f523421c31431c205fdf446ff0b9781030768f53a0cc4
-
SHA512
2369ae7eec05a14f481b1987f5ad0a22cbe805989399258543b5a9f01239b73af7483e20f3283f1bc2da2a8923ea0d3fa6669ef81b79751434b3dde59d49ebaf
-
SSDEEP
384:cUkAJN7Q/bTl73XPKMK2V7Hc7iyDK8e6lXEX2TtW3k6:aoNMTRTbK2Nc7iym81lXEOy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 338229551bfde46a156fd0268e3f935a_JaffaCakes118
Files
-
338229551bfde46a156fd0268e3f935a_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f92ae0085ca044b9767bf681a5505a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
CloseHandle
lstrcatA
WaitForSingleObject
DeleteFileA
CreateEventA
WriteFile
SetFilePointer
CreateFileA
lstrlenA
GetModuleFileNameA
LoadLibraryA
FreeLibrary
RtlUnwind
ExitProcess
HeapReAlloc
lstrcpyA
GetModuleHandleA
GetTempPathA
GetFileAttributesA
PulseEvent
SetEvent
CreateThread
GetVersionExA
ReadFile
ExitThread
HeapFree
lstrcmpA
GetProcAddress
user32
wsprintfA
DestroyWindow
MsgWaitForMultipleObjects
TranslateMessage
PeekMessageA
CreateWindowExA
CharToOemA
GetParent
DispatchMessageA
advapi32
RegOpenKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
shell32
SHGetFolderPathA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ