Static task
static1
Behavioral task
behavioral1
Sample
851f590ed3271a6bcddde5889b0a48b6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
851f590ed3271a6bcddde5889b0a48b6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
851f590ed3271a6bcddde5889b0a48b6_JaffaCakes118
-
Size
34KB
-
MD5
851f590ed3271a6bcddde5889b0a48b6
-
SHA1
acbe90edab058523e39a76d0f87d0c91cbcc7653
-
SHA256
c934e70ba742e1074a4b8fc910886598dea8145ab6e1584e4761ad9f9efbdd53
-
SHA512
7a389705b50367540b41bfe2b15ef9efa39e2c292f855e89e36e6d97b2d46b2f5cafa2aa931ab074420257c5a645665f970815f9e62b3f62d6f6a32d479a4bca
-
SSDEEP
384:iGKCSJQTjM2Bm8xzmhvfyctYyZPtdipy7ALpGQpGznieRy5tOtZpvWqwlEPUz+AX:iGKCRjDBm8Knn+wcFpGQpG9R4tHBSq+w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 851f590ed3271a6bcddde5889b0a48b6_JaffaCakes118
Files
-
851f590ed3271a6bcddde5889b0a48b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d96610a4751cf82544c58cb5f1d506c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetSystemDefaultLangID
FindClose
FindNextFileA
FileTimeToSystemTime
FindFirstFileA
CreateThread
CreateMutexA
lstrcmpA
lstrcatA
OpenMutexA
HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
GetStartupInfoA
lstrcmpiA
GetLastError
lstrcpyA
WaitForSingleObject
CloseHandle
lstrlenA
CreateDirectoryA
CreateFileA
GetModuleHandleA
Sleep
CreateProcessA
WriteFile
SetEndOfFile
lstrcpynA
SystemTimeToFileTime
SetFileTime
ReadFile
CopyFileA
GetModuleFileNameA
MultiByteToWideChar
GetSystemDirectoryA
GetVersionExA
GetFileSize
user32
PostQuitMessage
SendMessageA
GetDesktopWindow
LoadCursorA
DefWindowProcA
wsprintfA
GetClientRect
CreateWindowExA
GetDlgItem
PostMessageA
GetMessageA
DispatchMessageA
DialogBoxParamA
FindWindowExA
EnableWindow
EndDialog
GetSystemMetrics
MoveWindow
SetWindowPos
ShowWindow
MessageBoxA
RegisterClassExA
ole32
CoCreateInstance
CoInitialize
wininet
InternetQueryOptionA
InternetGetConnectedState
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
InternetOpenA
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
shell32
SHGetSpecialFolderLocation
ShellExecuteA
SHGetPathFromIDListA
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ