Static task
static1
Behavioral task
behavioral1
Sample
4a1bde9fff723e9dcff2a20fe48ba5b2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a1bde9fff723e9dcff2a20fe48ba5b2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a1bde9fff723e9dcff2a20fe48ba5b2_JaffaCakes118
-
Size
37KB
-
MD5
4a1bde9fff723e9dcff2a20fe48ba5b2
-
SHA1
e800df304b02f4851a89f64870b0c9951a7b2e64
-
SHA256
3ff52a39309124cdba85c3199a09eaeb6eecfe2d46f50586d78c7f9a3bed0588
-
SHA512
6eb8f0e4a5f4e2e5be69a0563c552aa5d1a91282c860bb9ee951a6ff0193235853e3dfa42d6fc0de919572a8601d810735a0277350ed99342f5899219061ff45
-
SSDEEP
768:J81/tP1qvM88qVGjg4xzqBEflaHOt3+hFiwMbeu5BZsow:i1/twM1qeFqBEtNk3/Mb5Z7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a1bde9fff723e9dcff2a20fe48ba5b2_JaffaCakes118
Files
-
4a1bde9fff723e9dcff2a20fe48ba5b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
1a3605ecab100f4cf77b04e5c8e1eb92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetSystemDirectoryA
GetModuleHandleA
GetCurrentDirectoryA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
ExitProcess
user32
SendDlgItemMessageA
GetDlgItem
EnableWindow
KillTimer
LoadIconA
MessageBoxA
MessageBoxIndirectA
PostMessageA
EndDialog
SendMessageA
SetTimer
ShowWindow
DialogBoxParamA
DestroyIcon
AppendMenuA
wsprintfA
GetSystemMenu
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
Sections
.code Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reg Size: 29KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ynzbqlx Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE