Static task
static1
Behavioral task
behavioral1
Sample
423b82f9d31c45b9e4f21a4fd3d44a3a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
423b82f9d31c45b9e4f21a4fd3d44a3a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
423b82f9d31c45b9e4f21a4fd3d44a3a_JaffaCakes118
-
Size
30KB
-
MD5
423b82f9d31c45b9e4f21a4fd3d44a3a
-
SHA1
19df8a3cddc1749efaabc676c3a7fd166f09ce08
-
SHA256
413e1290ac4c05e72922247fe1320021a0b2205bfe5c078d71f810cd52728e2d
-
SHA512
7670fd62b6ac30dad5cf4f66f68c178cf814dae03cd55a7cda38dc9ed84b1f6db0fe2b5ae27fbbef5564cc0a082c594037661eef206637efcd13eed22efa4e3f
-
SSDEEP
384:lPeksTGGfqTuEhGXDRWthzA9Jr2bpdRKDF9fb/WsYUZP:lziouEhwDRWKJr2bpSnfbOsYUh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 423b82f9d31c45b9e4f21a4fd3d44a3a_JaffaCakes118
Files
-
423b82f9d31c45b9e4f21a4fd3d44a3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
5bca12b0bd84f8539c47c3f3a2e0d7ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
CloseHandle
WaitForMultipleObjects
GetModuleFileNameA
GetCurrentProcessId
GetModuleHandleW
GetProcAddress
GetLastError
DeleteFileA
HeapFree
GetProcessHeap
GetCurrentProcess
ReadFile
SetEndOfFile
CancelIo
HeapAlloc
LoadLibraryA
GetSystemDirectoryA
lstrlenA
lstrcmpA
ExitThread
ResetEvent
CreateThread
WaitForSingleObject
SetEvent
CreateEventA
CreateMutexA
CreateProcessA
WriteFile
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
ReleaseMutex
lstrcpyA
CreateFileA
SizeofResource
LoadResource
FindResourceA
GetFileAttributesA
user32
wsprintfA
advapi32
RegCreateKeyExA
RegSetValueExA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
OleUninitialize
OleInitialize
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ