Static task
static1
Behavioral task
behavioral1
Sample
3d093990c8247bd1618260cb8cb300c8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d093990c8247bd1618260cb8cb300c8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d093990c8247bd1618260cb8cb300c8_JaffaCakes118
-
Size
24KB
-
MD5
3d093990c8247bd1618260cb8cb300c8
-
SHA1
ac8e967ebb0725223f64078d256bb3d7dc2e49e9
-
SHA256
500a5a74fab0362b502ee3d9aec2d787727789154f575f9e7201be1e42ca40be
-
SHA512
0e3130afca9feaf491241acecf1d66569203ad182dd08a2e448fddd4d92bb11b4990a71a09e18e02df23984c5a04f481f489bb1c686fd9df757e7633e8e0158e
-
SSDEEP
192:9WzogssbCxu/KLWhSJZMGaPFY68w3mqea1Iwl+xiXnR8apIr6tdV5vfH7wDArGOB:O56LmSJZM7bxbhYrSlvfHkwGOA6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d093990c8247bd1618260cb8cb300c8_JaffaCakes118
Files
-
3d093990c8247bd1618260cb8cb300c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
7e646107c1800d61e680b3f7895bdba5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
LoadLibraryA
FreeLibrary
DeleteFileA
GetCurrentProcess
SetFileAttributesA
GetModuleHandleA
OpenEventA
FindClose
GetModuleHandleW
GetProcAddress
CloseHandle
ExitProcess
GetCommandLineA
OpenProcess
GetShortPathNameA
GetEnvironmentVariableA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
TerminateProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
user32
CharUpperA
MessageBoxA
ExitWindowsEx
wsprintfA
advapi32
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
shell32
ShellExecuteExA
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE