Static task
static1
Behavioral task
behavioral1
Sample
694e31695d21173a502594efe681bdbb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
694e31695d21173a502594efe681bdbb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
694e31695d21173a502594efe681bdbb_JaffaCakes118
-
Size
31KB
-
MD5
694e31695d21173a502594efe681bdbb
-
SHA1
496041786ca1e62f63d82b7edad435c25e2c7f2b
-
SHA256
19f96e7ed82c9e86993592f2e182f76a712d0301c22e4d2cbd89df2b64d34435
-
SHA512
287904441f404fe289fe7d1df9cca6d998505f4de7744d99faa1637bd2d5f2258a76df7182e1777ad0721d024ac2836ba0ffff78d0025d26235b40a5d242745d
-
SSDEEP
384:zacvR53f+7JePaJJCJwrn4Ji5ENBKygP4D1vnCTwNJ6I32w:vR5P2JeSJJxrsi5EVgP4D1vnxik
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 694e31695d21173a502594efe681bdbb_JaffaCakes118
Files
-
694e31695d21173a502594efe681bdbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
e0221be114318b5eb8282c8ba123bd13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
GetLastError
GetProcAddress
FreeLibrary
CreateFileA
CreateEventA
lstrcatA
WaitForSingleObject
Sleep
CloseHandle
DeleteFileA
ExitThread
GetModuleFileNameA
SetFileAttributesA
HeapAlloc
GetProcessHeap
HeapFree
SetEvent
CreateThread
CreateProcessA
GetSystemDirectoryA
lstrlenA
lstrcmpA
WaitForMultipleObjects
ResetEvent
WaitForSingleObjectEx
WriteFileEx
SizeofResource
LoadResource
FindResourceA
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
SetFileAttributesW
WinExec
LoadLibraryA
GetFileAttributesA
user32
PeekMessageA
CreateWindowExA
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
TranslateMessage
wsprintfA
advapi32
RegNotifyChangeKeyValue
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
ole32
CoInitialize
CoUninitialize
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ