Static task
static1
Behavioral task
behavioral1
Sample
a34161aabf7e149d3d8cbfb196db2910_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a34161aabf7e149d3d8cbfb196db2910_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a34161aabf7e149d3d8cbfb196db2910_JaffaCakes118
-
Size
54KB
-
MD5
a34161aabf7e149d3d8cbfb196db2910
-
SHA1
ff154f56a3017f53c6d6aaaf1cf9f9e8c6febce3
-
SHA256
af6f8f2e0da2155f9ed0762cc6838384caca925c8cbf11cb8ac6d7392d774ad5
-
SHA512
44668f5832512f393ddb55a122fafccc55848071a2267581f5901974eab429112ce54f8797b315f20d023e2a47600a101a6d72cb12435a74fa65e96105ed8d52
-
SSDEEP
768:MhAxADh+vHRvRPf7spj1W6sJERoIptPdNTnfu3VtGwdVdihhOYN4vFZS7rM/T:sykh+vHPsHrfRoIp5msGihQuCS7o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a34161aabf7e149d3d8cbfb196db2910_JaffaCakes118
Files
-
a34161aabf7e149d3d8cbfb196db2910_JaffaCakes118.exe windows:5 windows x86 arch:x86
2fd87e916c88c2b8c1b43fde28cfd0dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
MoveFileExA
SetErrorMode
LoadResource
HeapAlloc
HeapFree
GetSystemDefaultLCID
GetProcessHeap
GetWindowsDirectoryA
WriteFile
GetVolumeInformationA
FreeResource
lstrcatA
CreateDirectoryA
SetCurrentDirectoryA
GetTempFileNameA
LockResource
CloseHandle
GetTempPathA
DeleteFileA
lstrcpyA
IsDebuggerPresent
SetUnhandledExceptionFilter
FindResourceA
CreateFileA
SizeofResource
ExitProcess
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
user32
wsprintfA
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
ShellExecuteA
urlmon
URLDownloadToFileA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ