Static task
static1
Behavioral task
behavioral1
Sample
634a4a6a986edc4904ad6206035a4b7b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
634a4a6a986edc4904ad6206035a4b7b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
634a4a6a986edc4904ad6206035a4b7b_JaffaCakes118
-
Size
9KB
-
MD5
634a4a6a986edc4904ad6206035a4b7b
-
SHA1
f9be3e941346ea1843dc5e263cd5c4452407e665
-
SHA256
3aeaa851c6353e271ffef8f5fc1c8998cbdb1d02dc14280719355bb771930498
-
SHA512
fe133fe14c5933c80d230225d44c8522990da2626a3636c4871805a90f171fcab163aa2d7b8fbf6754280381f3fcdb41a4b155783c807840b298c1262c173178
-
SSDEEP
96:1kBSsOd+XPBpABn2RDzQ1Q9BlzpxLssVOGVvg+6XJGstIoB8aQ/vpQ77ZUkNBu:i4sO0/BCBUDM2D3lfVvREGsTqs7y5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 634a4a6a986edc4904ad6206035a4b7b_JaffaCakes118
Files
-
634a4a6a986edc4904ad6206035a4b7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
7e80def496c694a18868c1e500c846a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFiber
EndUpdateResourceW
ExitProcess
ExpandEnvironmentStringsW
GetShortPathNameA
GetTempPathA
GetUserDefaultLangID
GlobalFindAtomA
GlobalHandle
VerLanguageNameW
VirtualProtectEx
_hwrite
_lread
_lwrite
lstrlenW
advapi32
BuildExplicitAccessWithNameW
CryptDestroyKey
DuplicateTokenEx
GetKernelObjectSecurity
GetLengthSid
NotifyChangeEventLog
QueryServiceStatus
RegCreateKeyW
RegGetKeySecurity
user32
CreateAcceleratorTableW
DdeAbandonTransaction
DrawCaptionTempW
EnumPropsExW
FindWindowW
GetAncestor
GetUserObjectInformationW
ImpersonateDdeClientWindow
InsertMenuItemA
IsDlgButtonChecked
KillTimer
RegisterClipboardFormatW
WaitForInputIdle
shell32
Control_FillCache_RunDLLW
DragAcceptFiles
DragQueryFile
ExtractIconResInfoW
PrintersGetCommand_RunDLLA
SHInvokePrinterCommandW
SheConvertPathW
SheGetPathOffsetW
SheSetCurDrive
ShellExecuteExW
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE