Static task
static1
Behavioral task
behavioral1
Sample
81d2c8afa695f685e76e00faf2fd9012_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
81d2c8afa695f685e76e00faf2fd9012_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81d2c8afa695f685e76e00faf2fd9012_JaffaCakes118
-
Size
18KB
-
MD5
81d2c8afa695f685e76e00faf2fd9012
-
SHA1
cef681a2ac8ed6e6721b4531a7a75b262bfaec8e
-
SHA256
21129680266b1682845d8a46d51ee52e62f6291257ff853dc1df7e3cad080e1d
-
SHA512
43e109a148b13e797ac79279e9e11c909d0c758ad856777ebb08fafd99bd18b0df407cab838baf8c31318cfaeb34bff0f11992180d431ffa81effa07f208c88b
-
SSDEEP
384:0UeMbgdKjMSLp/ZyLrjeq7RqjB3bJ55owbUhrD2hx6dHhl:0Ue+gsjtyzQNlowbUh+fU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81d2c8afa695f685e76e00faf2fd9012_JaffaCakes118
Files
-
81d2c8afa695f685e76e00faf2fd9012_JaffaCakes118.exe windows:5 windows x86 arch:x86
cb739af5191812a82962618ce70cc192
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
IsDebuggerPresent
TerminateProcess
ReadFile
RtlUnwind
GetDriveTypeA
GetLastError
GetCurrentDirectoryA
SetEndOfFile
FlushFileBuffers
IsBadWritePtr
SetFilePointer
CreateFileA
GetFileType
CloseHandle
WriteFile
ExitProcess
LocalFree
FormatMessageA
VirtualAlloc
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
user32
IsWindowVisible
SetWindowTextA
PeekMessageA
PostQuitMessage
MessageBoxA
wsprintfA
PostMessageA
EndDialog
DispatchMessageA
CreateWindowExA
GetActiveWindow
SendMessageA
SetFocus
UnregisterClassA
GetDesktopWindow
IsWindowEnabled
IsWindow
ShowWindow
ole32
CoTaskMemFree
CoTaskMemAlloc
oleaut32
SysFreeString
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysAllocString
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ