Static task
static1
Behavioral task
behavioral1
Sample
85463f4fa8ee46598507901ac130ef43_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
85463f4fa8ee46598507901ac130ef43_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85463f4fa8ee46598507901ac130ef43_JaffaCakes118
-
Size
174KB
-
MD5
85463f4fa8ee46598507901ac130ef43
-
SHA1
9a73b3292a269076a7b70ca0f8e1d77f8be956f1
-
SHA256
4ee4dae48f141e02c8c11a9b2c11c1c4669444a128b863272f2df81e3f17c944
-
SHA512
d9666ec500ab990e5658db6b9a4ee5cb825ff78550d65162b6aedc8aa2dcff583d31b92223d1fd5fd1fb026717893df358fafb3cd6731c19d76195f7878b5c40
-
SSDEEP
3072:SCrqhDbCOK1lX/UpM+c0tTqOEUh4G4kjFaz+PIGSSq7EHpvYX4r2dIOre+:6hDbCD+c0tTL0G4UoSPcSqo2Ir2ace+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85463f4fa8ee46598507901ac130ef43_JaffaCakes118
Files
-
85463f4fa8ee46598507901ac130ef43_JaffaCakes118.exe windows:4 windows x86 arch:x86
94b69eb63160d4cf3702c7b6278ef0d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
TranslateMessage
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetFileAttributesA
gdi32
SetTextColor
comdlg32
GetOpenFileNameA
advapi32
RegSetValueExA
shell32
ShellExecuteA
ole32
CoTaskMemFree
comctl32
ImageList_ReplaceIcon
msvcrt
free
oleaut32
GetErrorInfo
Sections
.text Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE