Static task
static1
Behavioral task
behavioral1
Sample
34720cd1ebc0e6904c8f97707cd8524f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34720cd1ebc0e6904c8f97707cd8524f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34720cd1ebc0e6904c8f97707cd8524f_JaffaCakes118
-
Size
52KB
-
MD5
34720cd1ebc0e6904c8f97707cd8524f
-
SHA1
dd1c92ff7026cef9d3b62a5d3772c46840cdc6ee
-
SHA256
892ecedf63bb9609d3f943f2a6a26da8268c20876d2862fc9447e194521d2cd3
-
SHA512
83b771d2a3a60f1028f13b8ca8aea39c0ca12fa87a55315580dba8e9e17f6f48731308e9b2e05682adc8b94e2d762c861a7236d6cbc9249b4bd7d4b0e2977b0d
-
SSDEEP
1536:8rjOMi6uAYPsGYKaPHEs67P9IvpWZLfg:6An3Y1Mso9Iv0L4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34720cd1ebc0e6904c8f97707cd8524f_JaffaCakes118
Files
-
34720cd1ebc0e6904c8f97707cd8524f_JaffaCakes118.exe windows:5 windows x86 arch:x86
9c55c8b46bda3257718226549f7fd667
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
CloseHandle
WriteFile
CreateFileA
GetSystemTime
lstrcatA
GetVersion
lstrcpynA
lstrlenA
GetLastError
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
FindAtomA
GetTickCount
GetTempPathA
LoadLibraryA
GetTempFileNameA
lstrcpyA
CreateMutexA
ExitProcess
OpenMutexA
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
user32
IsWindowVisible
GetWindowRect
GetCaretPos
wsprintfA
GetCursorPos
ClientToScreen
InflateRect
GetFocus
EqualRect
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE