Static task
static1
Behavioral task
behavioral1
Sample
45d9fbeffe48e28fa9cba22464abe061_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45d9fbeffe48e28fa9cba22464abe061_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45d9fbeffe48e28fa9cba22464abe061_JaffaCakes118
-
Size
60KB
-
MD5
45d9fbeffe48e28fa9cba22464abe061
-
SHA1
35c3c5eedb5ad576f51112b2d0421c9d4130eeb5
-
SHA256
7c9b1d83450fdd90496e6ec0c2124360650ed8c9d11196bae4dcbdf12e877cc4
-
SHA512
d7113a3d690c9f0613c545790d31ad796129dcf16522a2aedc50b26c1aacb1f0109cfa3b0924e653785e0fd2ea60b8808ebcf6fa769e3c745a1658e958664141
-
SSDEEP
768:HOSpAZkw5ewReAS4sIsttee+0dGqWTvBfnuAuwyBPFpU1tT:HObZkLrlyeBGqW9fuDwestT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45d9fbeffe48e28fa9cba22464abe061_JaffaCakes118
Files
-
45d9fbeffe48e28fa9cba22464abe061_JaffaCakes118.exe windows:4 windows x86 arch:x86
a4c3943dad80eabdacff5ca356841a38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
CreateProcessA
DeleteFileA
Sleep
GetSystemTime
Process32Next
GetCurrentProcessId
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetWindowsDirectoryA
GetModuleFileNameA
CreateThread
CopyFileA
CreateDirectoryA
GetSystemDirectoryA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
CreateFileA
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
HeapReAlloc
GetTimeZoneInformation
GetLocalTime
GetCommandLineA
GetVersion
HeapFree
GetLastError
WriteFile
ReadFile
TerminateProcess
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
user32
FindWindowExA
GetWindowTextA
wsprintfA
shell32
ShellExecuteA
winmm
timeGetTime
ws2_32
gethostname
WSAStartup
gethostbyname
inet_ntoa
rpcrt4
UuidCreateSequential
psapi
GetModuleFileNameExA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE