Static task
static1
Behavioral task
behavioral1
Sample
7535f64eb0a683240af62998e3a30b23_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7535f64eb0a683240af62998e3a30b23_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7535f64eb0a683240af62998e3a30b23_JaffaCakes118
-
Size
286KB
-
MD5
7535f64eb0a683240af62998e3a30b23
-
SHA1
2926937526d607acdc87ab2a79ca4ae1c8d689d4
-
SHA256
b67cd0eae3017a9419d52b1b959cf4a85b270017d1ce1dd1017b5654571c36f5
-
SHA512
5ac47226f6fb8d98d758eacb06e22c6314b7b230a4c30a31c7bf5bb55396e29b2006be75b9b2ca5b0fdc29d2bdf1b1b2b7e7ce2a0d3dbdda03d845d87dad6622
-
SSDEEP
6144:jL8rlciVX7xX2zuXfsxpJUVMNjNAh95cJSPBqQP:jImgp25xbUV8AhncJSPBqQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7535f64eb0a683240af62998e3a30b23_JaffaCakes118
Files
-
7535f64eb0a683240af62998e3a30b23_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2d8947a447e94f91004007555af474e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
rpcrt4
UuidCreate
kernel32
HeapFree
GetPrivateProfileStringW
GlobalFindAtomW
FindFirstFileW
lstrlenA
GetSystemInfo
GetProcessHeap
GetCurrentProcessId
GetModuleHandleW
FindClose
WritePrivateProfileStringW
LoadLibraryExA
HeapAlloc
LoadLibraryExW
GetWindowsDirectoryA
GetModuleHandleA
GetPrivateProfileIntW
EnumResourceLanguagesA
FindNextFileW
ExpandEnvironmentStringsW
WaitForSingleObject
GetSystemDirectoryW
CopyFileW
GetPrivateProfileIntW
LoadLibraryW
SetFileAttributesW
FreeLibrary
ReleaseMutex
CreateMutexW
lstrcmpiW
GetCurrentDirectoryW
LocalFree
GetCurrentProcess
shlwapi
GetAcceptLanguagesA
PathCreateFromUrlW
PathIsRelativeW
StrCmpIW
PathRemoveFileSpecW
PathFindExtensionW
UrlUnescapeW
PathAppendW
UrlCreateFromPathW
PathCombineW
Sections
.text Size: 145KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ