Static task
static1
Behavioral task
behavioral1
Sample
a485aeb4e5f11f7463bc1807698fd2ba_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a485aeb4e5f11f7463bc1807698fd2ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a485aeb4e5f11f7463bc1807698fd2ba_JaffaCakes118
-
Size
40KB
-
MD5
a485aeb4e5f11f7463bc1807698fd2ba
-
SHA1
d7a139c87074f93cda5f1fe75b47d572ebdc9d81
-
SHA256
9667d58a17e3c77d8acb9f543a90ce078ad863c507332e6c108e40c966e2f990
-
SHA512
1a9e4b39348ea9b1d5974ec9a025a3e5f8e9b50f0b764d951cb847b4347f0cf8d7156642d630fb0d3e6771a32bfb55db0d353526f06101916373331144d81957
-
SSDEEP
384:4IK7AIn00wDigqoC9WAvjBU8JKyXnDx5yrfRPrF6oPW3ixM:87AIncigqnPjBbDefRTF6oPW3ix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a485aeb4e5f11f7463bc1807698fd2ba_JaffaCakes118
Files
-
a485aeb4e5f11f7463bc1807698fd2ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
8812a046911f33ae4ef3cbbdeeedd027
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
LCMapStringA
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
GetStringTypeA
GetCurrentDirectoryA
GetShortPathNameA
GetOEMCP
SetCurrentDirectoryA
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeW
user32
GetMessageA
DispatchMessageA
IsDialogMessageA
TranslateMessage
PostQuitMessage
wsprintfA
PostMessageA
DestroyWindow
DialogBoxParamA
FindWindowA
CreateDialogParamA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
EndDialog
DefWindowProcA
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
shell32
ShellExecuteA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ