Static task
static1
Behavioral task
behavioral1
Sample
48320a645276540e2c0b91b7b238818d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48320a645276540e2c0b91b7b238818d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48320a645276540e2c0b91b7b238818d_JaffaCakes118
-
Size
72KB
-
MD5
48320a645276540e2c0b91b7b238818d
-
SHA1
7dbec0e4e336b7defb9b5c0f2eb92d0b323ff05e
-
SHA256
3294cbf162949cd6368aff7d657bd65b2d3ac76c80cbfc09c35fcacfcda3fa17
-
SHA512
f3e58acbcf866ad6a3fa544a280512d5d07708a99a24b143cfcad1c25e1694fc42bce8ea8b79dcfb7ade93709897d12a6abfe21405a08d17ccb4f76ecedaa85b
-
SSDEEP
768:cWOyWdyqniXUMK7FQ7QlAMRijhtxCEpMsgqL04s:/UiXUMK7+QSMR+ht0EGsgw0z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48320a645276540e2c0b91b7b238818d_JaffaCakes118
Files
-
48320a645276540e2c0b91b7b238818d_JaffaCakes118.exe windows:4 windows x86 arch:x86
46084168b412e051097ae39c055c9320
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
UnmapViewOfFile
VirtualAlloc
VirtualFree
GetModuleHandleA
VirtualProtect
SetLastError
LoadLibraryA
LoadLibraryExA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetProcAddress
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
LoadLibraryExW
lstrcatW
ReadFile
SetFilePointer
MapViewOfFileEx
CloseHandle
MapViewOfFile
CreateFileMappingW
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW
user32
MessageBoxA
wsprintfW
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.res Size: 44KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ