Static task
static1
Behavioral task
behavioral1
Sample
a491a6f3286f504d345ba4355450ad1d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a491a6f3286f504d345ba4355450ad1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a491a6f3286f504d345ba4355450ad1d_JaffaCakes118
-
Size
168KB
-
MD5
a491a6f3286f504d345ba4355450ad1d
-
SHA1
98393c5e27047dc533123220c4dfd9ab79956753
-
SHA256
d896b7e1b0cb730da8effe988e0aef3d256f6613b35546f943629853d79145a4
-
SHA512
34b9c667c380044092dcbc82641cb2b5fec86392961f24d14a07e963da90b603c0169f192d214fc397198336029a3597341647b8b53e1cb9dbdd22411a028859
-
SSDEEP
3072:UhSzIiBfIqd7oIQo1y3V083XhVlG0vFduuVFIl+kDw6KtTUqIrDAO5hWEW/8yB2a:3Kqek1yF0qX9Fd6lzDwlTUFfp5xX4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a491a6f3286f504d345ba4355450ad1d_JaffaCakes118
Files
-
a491a6f3286f504d345ba4355450ad1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
379c38da6b678bc9354f1893a3eebbfe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetACP
GetLastError
lstrcpyA
WideCharToMultiByte
OutputDebugStringW
lstrlenW
CheckRemoteDebuggerPresent
GetCPInfo
EnumResourceNamesA
lstrcpyW
MultiByteToWideChar
lstrcmpiW
lstrcpyA
DeleteCriticalSection
GetTickCount
GlobalAlloc
LockResource
InitializeCriticalSection
FindClose
GlobalFree
GetModuleHandleW
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
CharNextW
DispatchMessageW
GetDC
wsprintfW
KillTimer
TranslateMessage
PostThreadMessageW
SetTimer
GetMessageW
CharUpperW
SendMessageW
UnregisterClassA
shlwapi
PathCombineW
PathFileExistsW
ole32
CoTaskMemFree
CoRevokeClassObject
CoTaskMemAlloc
CoRegisterClassObject
CoCreateInstance
StringFromGUID2
CoUninitialize
CoTaskMemRealloc
CoInitialize
StringFromCLSID
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ