Static task
static1
Behavioral task
behavioral1
Sample
342c153c454ed3adc922869fe548c1b4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
342c153c454ed3adc922869fe548c1b4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
342c153c454ed3adc922869fe548c1b4_JaffaCakes118
-
Size
710KB
-
MD5
342c153c454ed3adc922869fe548c1b4
-
SHA1
1aa38b7eb4d30c9caab238f8200a2c9d4bd57dc6
-
SHA256
dbbc94c0d927a9bc69937fe5a9699a00575ab8b315b0ab86ed9e36b7fb0a9658
-
SHA512
09cf6c1e6dc9473133fedb50a1848885de383beb2d0af148ef436e3d73bf42b3b7f738181928351c00d9869c0ee6ce65e5d1290c148bc564a3701ac66282a5ce
-
SSDEEP
12288:PuNqRy6Rea78A2sKyWYh4t0G2pWdWr/WCPF3o1tydH0NFM4MLNsPAipb/y5LT:Enkei2sKynsZWlPF4uH0AqAipTy5LT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 342c153c454ed3adc922869fe548c1b4_JaffaCakes118
Files
-
342c153c454ed3adc922869fe548c1b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
18c9fed6f333c6ccabcff381acd71157
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
GetCurrentProcess
LCMapStringA
CreateFileA
LoadLibraryA
user32
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA
advapi32
RegEnumValueA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegCloseKey
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
Sections
.text Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ