Static task
static1
Behavioral task
behavioral1
Sample
41793e29f1269f320d8c1ae5c9ec69ac_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41793e29f1269f320d8c1ae5c9ec69ac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41793e29f1269f320d8c1ae5c9ec69ac_JaffaCakes118
-
Size
48KB
-
MD5
41793e29f1269f320d8c1ae5c9ec69ac
-
SHA1
83d994832be3c6ea05cd6aa2f7daa6a112abf559
-
SHA256
2fdae19057e8f37cf2cc61576ec19128ce3e77c68312f206c49f942b1509cec4
-
SHA512
a64a27bb3b4b272d8fe161e60558e278857c8a766a41c6170a462087dd076ee3b7de6ef803d28daa0ab53d2da9334f1153d31b273badc4f6d510c283eb83e2cb
-
SSDEEP
768:Tzt/OH6QSorCif29RU96rH8fC31enfB3vh42HL2BHOomhPiIeJFZVlrgQMgxO:8BS/DWJfCFsxvW2rcHO7hPgJFHJfO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41793e29f1269f320d8c1ae5c9ec69ac_JaffaCakes118
Files
-
41793e29f1269f320d8c1ae5c9ec69ac_JaffaCakes118.exe windows:5 windows x86 arch:x86
c938aa0efdda6bb8b27bec3edb8ccc34
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptCreateHash
CryptGetHashParam
DuplicateTokenEx
RegCloseKey
RegQueryValueExA
kernel32
GetLocalTime
shlwapi
PathCombineW
StrCmpNIA
user32
CharLowerBuffA
FindWindowExA
GetCursorPos
GetDlgItemTextA
GetForegroundWindow
GetIconInfo
GetWindowLongA
OpenWindowStationA
PeekMessageA
SendMessageA
SetProcessWindowStation
SetThreadDesktop
Sections
.cduz Size: 38KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xszkj Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mncfsv Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ