Static task
static1
Behavioral task
behavioral1
Sample
381189e4fcb49f079f19b3ed7b68afcf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
381189e4fcb49f079f19b3ed7b68afcf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
381189e4fcb49f079f19b3ed7b68afcf_JaffaCakes118
-
Size
182KB
-
MD5
381189e4fcb49f079f19b3ed7b68afcf
-
SHA1
62225e5522b162e7a4dd0f1069963a05b5fbef44
-
SHA256
ee885decaeee13171a8c6171df04ffbfe878fa65193e5a0402c2a72fc3affe50
-
SHA512
3cda8a0f71149a8fd9971a046f50d671dce53d8f71b482f4051039a44090645e2cf80401ec1ed4150ca4fa8751e2c10c85d05c8608c74e4cc09ac9c492ee7675
-
SSDEEP
3072:3pbFibOEY5CVLAFPVMKY5hLKrMK3Zs8j8j+Epu6zDIWMF1Lc8UJylqbfE2/J:3pxibR9A+7Lqx3Zxj8Scu08F1L1U7fES
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 381189e4fcb49f079f19b3ed7b68afcf_JaffaCakes118
Files
-
381189e4fcb49f079f19b3ed7b68afcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
52a419d1af70091e73803a1572682f02
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
ReleaseDC
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleFileNameA
advapi32
RegDeleteKeyA
comctl32
ImageList_SetImageCount
comdlg32
GetSaveFileNameA
gdi32
CreateFontIndirectA
rasapi32
RasSetEntryDialParamsA
shell32
ShellExecuteA
Sections
.text Size: 23KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE