Static task
static1
Behavioral task
behavioral1
Sample
352448c60e0233a4eca07b93a5b58a71_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
352448c60e0233a4eca07b93a5b58a71_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
352448c60e0233a4eca07b93a5b58a71_JaffaCakes118
-
Size
45KB
-
MD5
352448c60e0233a4eca07b93a5b58a71
-
SHA1
59fc20d92f80686e6a18cf410929a67be33d5452
-
SHA256
367cb8ea652b955ebbabcff419954050330e4cef42e824cceaa23c8916b645b2
-
SHA512
941e6dfd633b72a5ddb91fd819d8f7482273d4e1e8b19cb2f87050123e5e10565d4418a2d499bd720b41db99525d734cc5e1fafc56669ece0e4b1bd73116d9c8
-
SSDEEP
768:/IXD84wGxA3n7bJxW9P9A4p5Vk/plwLi+k3UvACXW3UxMSPT:/ijSnL4p5VYplMHACfT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 352448c60e0233a4eca07b93a5b58a71_JaffaCakes118
Files
-
352448c60e0233a4eca07b93a5b58a71_JaffaCakes118.exe windows:4 windows x86 arch:x86
613f1c82a18b265e7423b0fbb1f9cc34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
FreeLibrary
GetCurrentProcessId
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
GetSystemDirectoryA
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA
DeleteFileA
lstrlenA
GetTempPathA
Process32Next
CopyFileA
Sleep
advapi32
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
mfc42
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
_setmbcp
__CxxFrameHandler
_mbscmp
exit
sscanf
__dllonexit
_onexit
_controlfp
shell32
ShellExecuteA
user32
IsWindow
KillTimer
EnableWindow
GetAsyncKeyState
GetKeyboardState
GetForegroundWindow
GetClientRect
DrawIcon
SetTimer
SetWindowPos
FindWindowA
SendMessageA
GetSystemMetrics
LoadIconA
IsIconic
wsock32
inet_ntoa
gethostname
gethostbyname
Sections
code Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE