Static task
static1
Behavioral task
behavioral1
Sample
45adf117e1f825ce9a68978545b47d7f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45adf117e1f825ce9a68978545b47d7f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45adf117e1f825ce9a68978545b47d7f_JaffaCakes118
-
Size
27KB
-
MD5
45adf117e1f825ce9a68978545b47d7f
-
SHA1
346fd932a4ffc7e67071cb0df0f8445775c14866
-
SHA256
ec3db4dd398ce0cb473e180d1177d02369ac71563bdcb0efb71e313755ecf923
-
SHA512
c8ace2b006a9277208f6ca9e66ecdd5bea4435afe880198283d50cd853fe2143bd503df9877271ad482f28f091d644cc32c29f1cfc26a314ca671903aa2cace6
-
SSDEEP
384://1T4s8PRqTue44XdrPZnoVpRlpKCjg3DUJX52r:FeuueNXdrP9iQDUJJ2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45adf117e1f825ce9a68978545b47d7f_JaffaCakes118
Files
-
45adf117e1f825ce9a68978545b47d7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
941fdb7511646973b99558b978d63148
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetProcAddress
LoadLibraryA
GetLastError
GetCurrentProcessId
HeapFree
GetProcessHeap
HeapAlloc
GetModuleFileNameA
WaitForMultipleObjects
CloseHandle
SetFileAttributesW
OpenEventW
GetSystemDirectoryA
DeleteFileA
GetFileAttributesA
lstrlenA
lstrcmpA
ExitThread
ResetEvent
CreateThread
WaitForSingleObject
SetEvent
CreateEventA
CreateMutexA
WriteFile
CreateProcessA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
ReleaseMutex
lstrcpyA
CreateFileA
SizeofResource
LoadResource
FindResourceA
user32
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA
DestroyWindow
wsprintfA
CloseWindow
advapi32
RegSetValueExA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyW
RegCreateKeyExA
ole32
OleInitialize
OleUninitialize
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ