Static task
static1
Behavioral task
behavioral1
Sample
974b9811d69c23b43cfedfdf92bcca2f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
974b9811d69c23b43cfedfdf92bcca2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
974b9811d69c23b43cfedfdf92bcca2f_JaffaCakes118
-
Size
12KB
-
MD5
974b9811d69c23b43cfedfdf92bcca2f
-
SHA1
e14117e39cef20f2bdf26e2edc5b0ed2cd31b634
-
SHA256
b43b91ccec1a73d4b7e189eb16a1a048cdc8de0b53c6bf4edc01efeebb59218e
-
SHA512
afbe6588a8d163a55d5853a78868135b95d344795ff8c3a0238ffbeb008e93d686ca37c47d5cef0e8bdbcf20b0b711a90aba63445db12efc2590eb3f96af8ef4
-
SSDEEP
192:LZWEVtqVeDjO7ZZMGSbZ4q2Ky+CZPrY68Xlb5SMQW1WcQN8J1qqyNKwG5Roc/v2:PaDMyKyjVbXarwG5Rowv2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 974b9811d69c23b43cfedfdf92bcca2f_JaffaCakes118
Files
-
974b9811d69c23b43cfedfdf92bcca2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
5d0cb51b82a926ff0755604d0d0eebf5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
LoadLibraryA
FreeLibrary
DeleteFileA
lstrcpyA
lstrcatA
GetCurrentProcess
GetProcAddress
CloseHandle
GetFileAttributesA
GetModuleHandleW
VirtualQuery
ExitProcess
GetModuleHandleA
GetCommandLineA
HeapAlloc
HeapFree
GetProcessHeap
WriteFile
OpenProcess
CreateFileA
GetTempPathA
TerminateProcess
Process32First
CompareStringA
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
user32
CharToOemA
wsprintfA
MessageBoxA
ExitWindowsEx
ShowWindow
ReleaseDC
advapi32
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE