Static task
static1
Behavioral task
behavioral1
Sample
5a1ae12d526c07f4582accd0cc4d2787_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a1ae12d526c07f4582accd0cc4d2787_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a1ae12d526c07f4582accd0cc4d2787_JaffaCakes118
-
Size
192KB
-
MD5
5a1ae12d526c07f4582accd0cc4d2787
-
SHA1
ea9792511100678fd82dafed871978eb22815466
-
SHA256
5634f852606ff45e67e62292066b5fcff317375cb0613084a6b8717624410cff
-
SHA512
c354cb10c944a7855d8cc66282973c0b88912af50a2abc106604ded7ac2e18dd9938f25123fcbb38111d6ead763780fa55a04daff1ae48afde419b59b4b57be4
-
SSDEEP
6144:PIXPkqHPiOLIMFHNKOIRFidllNsJZSJNYVeL09:PI/9ikIMFHNK/FidNSSJNYaM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a1ae12d526c07f4582accd0cc4d2787_JaffaCakes118
Files
-
5a1ae12d526c07f4582accd0cc4d2787_JaffaCakes118.exe windows:4 windows x86 arch:x86
b37c4596879266598cf0f5d1d471b634
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
GetCurrentProcess
LCMapStringA
CreateFileA
LoadLibraryA
user32
CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA
advapi32
RegDeleteKeyA
RegCreateKeyA
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegQueryValueA
RegSetValueA
RegCloseKey
RegEnumValueA
Sections
.text Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ