Static task
static1
Behavioral task
behavioral1
Sample
43db1d66b47279f43ecfc50377f9efd2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43db1d66b47279f43ecfc50377f9efd2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43db1d66b47279f43ecfc50377f9efd2_JaffaCakes118
-
Size
80KB
-
MD5
43db1d66b47279f43ecfc50377f9efd2
-
SHA1
7f7b145e9c160b57ab6d617a9ea95a462ec7b975
-
SHA256
91e0a11da9d80ce22efa4283b85cfdc9a24534ed8ac757dd7389b0a4fa5aa06f
-
SHA512
1b3da5adcf7eb33128bd8b3dd7e7552c51e77d43ad130292e0a089f8554e8063eb229d7d82c6f13eeec191a6f33e6f21de462f6692db4c1ffc2b51350444f7f3
-
SSDEEP
768:G3CtGKGHDripio9NtdqYHO7EedLZIoHEtiPyDIBiEoh6o:GQi3YHOioHEti6DMVo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43db1d66b47279f43ecfc50377f9efd2_JaffaCakes118
Files
-
43db1d66b47279f43ecfc50377f9efd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
bc75972e263ca992b266fa8063f41285
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
Sleep
DeleteFileA
RemoveDirectoryA
WritePrivateProfileSectionA
CopyFileA
GetPrivateProfileSectionA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
CreateDirectoryA
FindFirstFileA
FindClose
GetWindowsDirectoryA
GetPrivateProfileStringA
GetShortPathNameA
GetModuleFileNameA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
CloseHandle
user32
FindWindowA
SendMessageA
advapi32
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ