Static task
static1
Behavioral task
behavioral1
Sample
411aedff2ce635d30407d4661a3a5b82_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
411aedff2ce635d30407d4661a3a5b82_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
411aedff2ce635d30407d4661a3a5b82_JaffaCakes118
-
Size
40KB
-
MD5
411aedff2ce635d30407d4661a3a5b82
-
SHA1
10469b2b64f8745a8279681e9e8244c1cc2b3cab
-
SHA256
91e5d9fc2f1f94b1fadca83b8c6494bac6ef9811edeaad18e0ef6331099a019a
-
SHA512
caaffad26fdb52d6153529be5fad190f91fd9d94d38e52605edd032064eea89f9e355766b64d3440d8e1a4ffbb2c55dbb6fade5add16257b48e0197456865695
-
SSDEEP
768:KVmEumo3bM2vJ0Yn8iPk6Lc/IXRAUGv4A:4mTBJ0C8uc/IXRAUGv4A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 411aedff2ce635d30407d4661a3a5b82_JaffaCakes118
Files
-
411aedff2ce635d30407d4661a3a5b82_JaffaCakes118.exe windows:4 windows x86 arch:x86
1dc4e9ad46243ae57ef50194268e0c4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetCurrentProcess
FreeLibrary
GetFileAttributesA
GetStringTypeA
LCMapStringW
ExitProcess
TerminateProcess
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle
ReadFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
WriteFile
SetFilePointer
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
MultiByteToWideChar
LCMapStringA
GetStringTypeW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenProcessToken
userenv
GetUserProfileDirectoryA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE