Static task
static1
Behavioral task
behavioral1
Sample
863904130061550cfd2e8b742b9ca7c1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
863904130061550cfd2e8b742b9ca7c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
863904130061550cfd2e8b742b9ca7c1_JaffaCakes118
-
Size
65KB
-
MD5
863904130061550cfd2e8b742b9ca7c1
-
SHA1
06377219b1db252e10fd1484d6a9f16b2d530cf1
-
SHA256
0b198ca7e757bfabb051cda4a7ccc4c5cbbb5831bd78ce28afcb3a742de5f1a7
-
SHA512
a15d5b38ab97680275bdd4bedf1f210a077afe0a95c1b5fd1d8e210b9b4a12b15d57980354f77657dd563a21916acc7c87e10659b2c82642ed03f952e3701523
-
SSDEEP
768:M/NDB9tkB/Zr8Ie2tVwn1uquLFC1nBkuCfyfRzZ/uD:M/NDB4B/ZrhvtVS1uquLE1nWuPRsD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 863904130061550cfd2e8b742b9ca7c1_JaffaCakes118
Files
-
863904130061550cfd2e8b742b9ca7c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
0738cc985cd8a29f1095130926d75cc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
LockResource
LoadResource
FindResourceW
GetProcAddress
GetModuleHandleW
WritePrivateProfileStringW
SetFileAttributesW
CopyFileW
VirtualFree
CloseHandle
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
WideCharToMultiByte
GetModuleFileNameW
Sleep
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
user32
wsprintfW
GetWindowThreadProcessId
FindWindowW
shell32
ShellExecuteW
msvcr71
_access
__security_error_handler
_c_exit
_exit
_XcptFilter
_cexit
exit
_wcmdln
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
strstr
_except_handler3
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE