Static task
static1
Behavioral task
behavioral1
Sample
45be488f5afd07758c8a414ea8983c5c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45be488f5afd07758c8a414ea8983c5c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45be488f5afd07758c8a414ea8983c5c_JaffaCakes118
-
Size
1004KB
-
MD5
45be488f5afd07758c8a414ea8983c5c
-
SHA1
709938dc2fd5e6c333c7d5b42e6a255190ece585
-
SHA256
e507a910bf9fd15712ad3ae2b42d89ae1f9a7a5a6c73d3a8696d6911507dc9ee
-
SHA512
e37ec4f84914ba5e291686a3d8789b098cab997c6ed6773a3f6d1b9e43bb07d7d17f2f951a842feea4113f04e0e2ac5f5b78c9615d61089d2f8d5fe31dcc736c
-
SSDEEP
24576:NVrYMuV28SYyD94czAECv1pekutS1wYqVes33QZlTh:NKfyx4gk9poSGYyes33QZBh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45be488f5afd07758c8a414ea8983c5c_JaffaCakes118
Files
-
45be488f5afd07758c8a414ea8983c5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
5d08e6be3d6b97d985b0dfb6eaccb4fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateIoCompletionPort
OpenMutexA
CreateDirectoryA
GetFileType
DosDateTimeToFileTime
LoadResource
lstrcpyA
GetUserDefaultLCID
SetConsoleTitleA
SetFileAttributesA
ExitThread
WaitNamedPipeA
CancelIo
CompareStringA
CreateMutexW
SearchPathW
GlobalDeleteAtom
FlushFileBuffers
GetOEMCP
SetEvent
GetDiskFreeSpaceW
ReadConsoleInputW
EnumCalendarInfoW
PulseEvent
SetHandleCount
EnumSystemCodePagesW
WritePrivateProfileStructA
PrepareTape
VirtualAllocEx
_lread
InitializeCriticalSection
GetBinaryTypeA
SetProcessAffinityMask
IsBadReadPtr
OutputDebugStringA
CloseHandle
ReleaseSemaphore
GetStartupInfoA
SetConsoleMode
LocalReAlloc
GetThreadContext
SetProcessShutdownParameters
RemoveDirectoryA
GlobalFindAtomW
_llseek
GetFileAttributesA
SetVolumeLabelA
FreeLibrary
VirtualLock
ExitProcess
gdi32
CreateFontIndirectA
BitBlt
GetGlyphOutlineA
Polyline
GetRgnBox
SetROP2
TextOutW
GetViewportOrgEx
ExtFloodFill
EnumFontFamiliesExA
GetRegionData
CreateEnhMetaFileA
comdlg32
GetSaveFileNameA
advapi32
SetEntriesInAclW
RegisterServiceCtrlHandlerA
GetServiceKeyNameW
EnumDependentServicesA
AccessCheckAndAuditAlarmW
OpenEventLogW
GetServiceDisplayNameA
ObjectDeleteAuditAlarmW
ole32
CreateStreamOnHGlobal
OleSaveToStream
OleFlushClipboard
CoDisconnectObject
CoCreateInstance
oleaut32
SafeArrayUnaccessData
VariantChangeType
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetElement
VariantCopy
shlwapi
SHAutoComplete
PathGetDriveNumberW
Sections
.text Size: 4KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 693KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ