Static task
static1
Behavioral task
behavioral1
Sample
72f62974e2e5e7cb81bbf3a0fc140c2c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72f62974e2e5e7cb81bbf3a0fc140c2c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72f62974e2e5e7cb81bbf3a0fc140c2c_JaffaCakes118
-
Size
736KB
-
MD5
72f62974e2e5e7cb81bbf3a0fc140c2c
-
SHA1
40d7e747653a6a2d28d72ed577228ba60834e8dd
-
SHA256
c7c47e72cc8dbc7feba49639a4d7f2b406f6e0b79eac6a368f4159ad70f1a14e
-
SHA512
dcf98238a08ca4c2144fcf7ea4e66756f486831450111e7a58786409d3f9bdb7000fdca95bf42876c5833f5481f82e2c350b7322c228615753b54998b14ad614
-
SSDEEP
12288:q2fd0yCuJtY8SvK/B3FP06lv0q/+71DoqkmWp+NEYtpiQAG083bFsROrgQFgSlJs:q2SyCuYdyB10U/e1DolmWp8fAGX3bSRH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72f62974e2e5e7cb81bbf3a0fc140c2c_JaffaCakes118
Files
-
72f62974e2e5e7cb81bbf3a0fc140c2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
83f05e725a6699067c4be3bd7aaf6b58
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
ExpandEnvironmentStringsA
advapi32
RegQueryValueExA
Sections
.text Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE