Static task
static1
Behavioral task
behavioral1
Sample
75de916934a51316eac90946d8982b27_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
75de916934a51316eac90946d8982b27_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75de916934a51316eac90946d8982b27_JaffaCakes118
-
Size
19KB
-
MD5
75de916934a51316eac90946d8982b27
-
SHA1
dd09a8566fc1b2729d09fb488ddf11e0149d59ee
-
SHA256
f3c8d8ceed43b3b79b00cd85ecce4942b97d855973a80f76fe5aaef0b1ba3080
-
SHA512
c4f45f90b5da26a8447f3a32fe077f0ed9bd94ee65e91a3f4980ebfe577b791da0260a85c367b0236c02285e97ad800c6749b326e55d94cfb3c2d6e6d982bfdd
-
SSDEEP
384:Ot7l0AUTTK40DPFbDcNvauvOQmZys0R6HV3BYHb+:I7PUh0DONvaINiyJ4l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75de916934a51316eac90946d8982b27_JaffaCakes118
Files
-
75de916934a51316eac90946d8982b27_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a7d2767e6e49bc54710e226603d108d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathA
WinExec
GetFullPathNameA
lstrcatW
CloseHandle
MapViewOfFile
CreateFileMappingA
LocalAlloc
GetTickCount
ExitProcess
GetProcAddress
LoadLibraryA
LocalFree
GetCommandLineA
GetUserDefaultLCID
GetModuleHandleA
GetWindowsDirectoryA
lstrlenW
HeapCreate
GetVersionExA
HeapAlloc
HeapFree
WaitForSingleObject
CreateSemaphoreA
ReleaseSemaphore
IsDBCSLeadByte
GetModuleFileNameA
FindResourceA
LoadResource
SizeofResource
MultiByteToWideChar
GetFileAttributesA
GetPrivateProfileStringA
lstrcmpiA
user32
GetWindowLongA
SetWindowLongA
PostMessageA
EnumWindows
wsprintfW
SystemParametersInfoA
PostQuitMessage
DefWindowProcA
SendMessageA
CallWindowProcA
SetForegroundWindow
DispatchMessageA
TranslateMessage
GetMessageA
RegisterWindowMessageA
CreateWindowExA
RegisterClassA
LoadIconA
FindWindowA
GetSystemMetrics
LoadStringA
CharUpperA
CharPrevA
CharNextA
GetClassNameA
MessageBoxA
MessageBoxW
GetParent
GetActiveWindow
wsprintfA
CharLowerA
GetWindow
IsWindow
comdlg32
GetOpenFileNameA
advapi32
RegSetValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
ole32
CoCreateInstance
CoInitialize
oleaut32
SysAllocStringByteLen
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE