Static task
static1
Behavioral task
behavioral1
Sample
03a782a41fe020534756cbd8f2e16cf7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
03a782a41fe020534756cbd8f2e16cf7_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
03a782a41fe020534756cbd8f2e16cf7_JaffaCakes118
-
Size
535KB
-
MD5
03a782a41fe020534756cbd8f2e16cf7
-
SHA1
58bcc7507fede886c4aeb8c64b112a7f61d8f0aa
-
SHA256
e4392a104518b2c72963f164164149e9ec495e935fa7b3d19dad6e7b568a65a0
-
SHA512
0f64cf5fb255677899090d03f75cbcd6694e70fd504c6e9833db91ec74029eb0db94bb87ea9582e290f91069650e7ea9d46ea22205d511df603ad7b28c9b11d2
-
SSDEEP
12288:TNegxYdDiAqfZOwpf88bjZRxwt4fksQeMxUHl688:TkXdDiAgHEsj7x8s0xilw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03a782a41fe020534756cbd8f2e16cf7_JaffaCakes118
Files
-
03a782a41fe020534756cbd8f2e16cf7_JaffaCakes118.exe windows:5 windows x86 arch:x86
c8166fec4f8e6dc7e1d632be4c838e3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueA
kernel32
SetEvent
shlwapi
PathCombineW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
ExitWindowsEx
FindWindowExA
GetDlgItemTextA
GetForegroundWindow
GetWindowLongA
GetWindowThreadProcessId
LoadCursorA
OpenDesktopA
PeekMessageA
ToUnicode
Sections
.wvsv Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mfunaf Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pmv Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ