Static task
static1
Behavioral task
behavioral1
Sample
a45dc70fa002a92ee281db1d6fd56f88_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a45dc70fa002a92ee281db1d6fd56f88_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a45dc70fa002a92ee281db1d6fd56f88_JaffaCakes118
-
Size
202KB
-
MD5
a45dc70fa002a92ee281db1d6fd56f88
-
SHA1
9d745c5680cc61c55c91344284d2fd199f932624
-
SHA256
86afd8a0aec7b55d03af4a33758d2366ab151fbbb6811886db1c3082be042e2b
-
SHA512
a462104b1e0be1e7d28d09d47def2f5ff885bb1015217af35f8bffc1576d55fd8db0e93758850260469d4358188e3346f2d155d390effe9db910083f0ab16c21
-
SSDEEP
3072:jozkccDbu/QlgkbzmrImOFdEXJG0WiOPfhso/gj2u5GBly:UzkccDa/GggzmNd7WIoYri
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a45dc70fa002a92ee281db1d6fd56f88_JaffaCakes118
Files
-
a45dc70fa002a92ee281db1d6fd56f88_JaffaCakes118.exe windows:1 windows x86 arch:x86
721a77c2d561345d3d11aaf7556f6056
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetConsoleMode
CreateToolhelp32Snapshot
TlsAlloc
HeapFree
GetModuleHandleA
GetSystemDirectoryA
IsBadStringPtrA
lstrcmpiA
QueryPerformanceFrequency
FindResourceA
GetDriveTypeA
GetStartupInfoA
ResetEvent
LCMapStringA
GetOEMCP
LoadLibraryA
LoadResource
GetComputerNameW
IsDebuggerPresent
IsValidCodePage
LocalFree
lstrcpynA
CreateThread
TlsFree
FreeEnvironmentStringsA
TlsSetValue
HeapAlloc
GetConsoleCP
GetCurrentThreadId
GetStringTypeW
FileTimeToSystemTime
SetEndOfFile
GetSystemInfo
TlsGetValue
LockResource
GlobalReAlloc
SetThreadAffinityMask
UnmapViewOfFile
GlobalUnlock
CloseHandle
SetHandleCount
GetTimeFormatA
CreateFileMappingA
SetLastError
GetFileType
FlushFileBuffers
user32
RegisterClassExA
SetClassLongA
ModifyMenuA
SetScrollInfo
PtInRect
SetWindowLongA
CallWindowProcA
DefMDIChildProcA
WindowFromPoint
TranslateAcceleratorA
DefDlgProcA
SendMessageTimeoutA
GetScrollInfo
BeginPaint
SetFocus
CreateIconIndirect
FillRect
GetWindowLongA
GetCapture
GetSysColor
IsZoomed
EndDialog
EnumChildWindows
CheckDlgButton
MoveWindow
DrawEdge
ScrollWindowEx
CreatePopupMenu
ExitWindowsEx
GetClassLongA
SetTimer
GetKeyState
DialogBoxIndirectParamA
TrackPopupMenu
EndPaint
GetParent
MapWindowPoints
GetDlgItem
RedrawWindow
DestroyWindow
CreateWindowExA
AppendMenuA
DrawFrameControl
SetDlgItemTextA
msvcrt
__p__commode
memcpy
_XcptFilter
_adjust_fdiv
_exit
__set_app_type
_controlfp
exit
_except_handler3
__setusermatherr
_initterm
__getmainargs
__p__fmode
_acmdln
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ