Static task
static1
Behavioral task
behavioral1
Sample
73453ca73a875336895d1379dc5a162a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
73453ca73a875336895d1379dc5a162a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73453ca73a875336895d1379dc5a162a_JaffaCakes118
-
Size
144KB
-
MD5
73453ca73a875336895d1379dc5a162a
-
SHA1
ead98b98b5c964588034cb914989ca2618c446cb
-
SHA256
1445d523f51c16e06d1d6165a09418ce79779373a46b38479b5afa827bcaa3a8
-
SHA512
241a39d8df9eb0dccc8115ba87539c28c7d94e6cf82c23d48871690570212e819b200051d2c547a04572789f24a4d7f9f36c6b88248838052a1cfda4ce2cb1ee
-
SSDEEP
3072:07RSLsJ3o/Pbxbk8asiW/45UsL+mQssFnX1W+O4IViYG7h:xqoLtk8asiW/41CTssFFJIVU7h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73453ca73a875336895d1379dc5a162a_JaffaCakes118
Files
-
73453ca73a875336895d1379dc5a162a_JaffaCakes118.exe windows:4 windows x86 arch:x86
570affad47c62a07ba5e09c32a407c6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
RpcBindingSetAuthInfoA
RpcStringBindingComposeA
NdrClientCall
RpcBindingFromStringBindingA
RpcStringFreeA
user32
SetTimer
KillTimer
DispatchMessageA
GetWindowTextA
IsWindowVisible
GetMessageA
LoadStringA
wsprintfW
CharUpperA
PeekMessageA
PostThreadMessageA
EnumWindows
MessageBoxA
CharNextA
GetWindowThreadProcessId
wsprintfA
kernel32
ReadProcessMemory
CreateProcessW
ClearCommError
SetFilePointer
GetStartupInfoA
MapViewOfFile
ClearCommError
CreateFileMappingA
ExitProcess
FindFirstFileA
GetExitCodeProcess
DuplicateHandle
EnumResourceNamesW
UnmapViewOfFile
ReadFile
SetLastError
FindResourceExA
ExitProcess
CreateMutexA
GetModuleFileNameW
ReleaseMutex
FindClose
QueryPerformanceCounter
LocalSize
shlwapi
PathFindExtensionA
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rscr Size: 512B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ