Static task
static1
Behavioral task
behavioral1
Sample
a447acba3a239e4aaf460c19316427f5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a447acba3a239e4aaf460c19316427f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a447acba3a239e4aaf460c19316427f5_JaffaCakes118
-
Size
136KB
-
MD5
a447acba3a239e4aaf460c19316427f5
-
SHA1
5c09fc9d857041ae72e8d59326f50518db4d4f62
-
SHA256
c6c26e09700897c152164661221ff19c9dc266058085b5a07c25b5284744114c
-
SHA512
62d6a0c6ba3a978a711c58fda02759e06bdb19955f514d61b1f389ea8ac04777f08131f3d600012b353aca57af5faf112fa7acad5ecf25082e9665fd12c0c347
-
SSDEEP
3072:JHWTnK/5wl6tJwg/E+ituov01clYjGBLDq+iOV:J2+/5IYEtlMq2jGBq+iOV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a447acba3a239e4aaf460c19316427f5_JaffaCakes118
Files
-
a447acba3a239e4aaf460c19316427f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
79fa17429ad3633787fec26712f2c2e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeLabelW
lstrlenA
GetFileType
GetModuleHandleExW
SystemTimeToTzSpecificLocalTime
TransmitCommChar
AddAtomW
lstrcmpiA
ReplaceFileW
RegisterWaitForSingleObject
CreateThread
MapViewOfFileEx
EnumResourceNamesW
lstrcmpiW
IsDBCSLeadByte
PeekNamedPipe
OpenFileMappingW
GetTempPathA
TryEnterCriticalSection
FileTimeToDosDateTime
SetInformationJobObject
LoadLibraryA
CreateProcessA
EndUpdateResourceA
AreFileApisANSI
AddAtomA
SuspendThread
RtlMoveMemory
GetEnvironmentVariableW
GetProcAddress
LocalHandle
ole32
CoCreateGuid
OleDuplicateData
OleCreateStaticFromData
CoLockObjectExternal
user32
VkKeyScanW
CheckRadioButton
DispatchMessageA
ChildWindowFromPoint
GetWindowTextW
SetRectEmpty
FrameRect
AllowSetForegroundWindow
GetThreadDesktop
GetDoubleClickTime
GetLastActivePopup
ShowWindowAsync
SendNotifyMessageW
DefMDIChildProcA
LoadCursorA
NotifyWinEvent
DestroyAcceleratorTable
shlwapi
wnsprintfA
advapi32
InitiateSystemShutdownW
RegSaveKeyW
RegSaveKeyExW
ImpersonateLoggedOnUser
RegEnumValueW
SaferCreateLevel
shell32
ExtractIconA
SHGetSpecialFolderLocation
gdi32
GetBrushOrgEx
CreateHatchBrush
CreateRoundRectRgn
SetMagicColors
GetTextFaceW
AbortPath
PtInRegion
SetRectRgn
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE