Static task
static1
Behavioral task
behavioral1
Sample
85230f7aab7ff6c792a2f52df2f1e10c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
85230f7aab7ff6c792a2f52df2f1e10c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85230f7aab7ff6c792a2f52df2f1e10c_JaffaCakes118
-
Size
193KB
-
MD5
85230f7aab7ff6c792a2f52df2f1e10c
-
SHA1
a740fa357b2ee6653bcd389abee86f030afe6aa8
-
SHA256
00b546df26c44b417ff6d666a2eb836afcc25495e1f2778e568d1d330600cdb2
-
SHA512
e6128214b2d4e48d4490248fc70a7e1efe8cc4547abfb67f3bc789d632f0360a4f533aef516faf3342ba57e8a3ca4e59a52b0191eea95cf4e81c25cf941d8a3f
-
SSDEEP
3072:PlK0iWT6LLeznBZJ0RU4WycD1HMjFokV/uV1AzC/B4/JZ1Yh5O+POlRzDa:4Wwkobo1sHV6mC5Cn+PObG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85230f7aab7ff6c792a2f52df2f1e10c_JaffaCakes118
Files
-
85230f7aab7ff6c792a2f52df2f1e10c_JaffaCakes118.exe windows:4 windows x86 arch:x86
0c48368b32dc0555825a5ca38166ecaf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
LoadLibraryA
CloseHandle
CreateFileA
LCMapStringA
user32
CreateWindowExA
wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
advapi32
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
Sections
.text Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ