Static task
static1
Behavioral task
behavioral1
Sample
a5772f8b33338b4be9f67f936b1377b6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5772f8b33338b4be9f67f936b1377b6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5772f8b33338b4be9f67f936b1377b6_JaffaCakes118
-
Size
88KB
-
MD5
a5772f8b33338b4be9f67f936b1377b6
-
SHA1
17246291357db7f02ef17a108f28ce3bd2a89c2e
-
SHA256
a5dae4f7e3432da8966410e708437eda3122509c2da600b1858ee302298ee885
-
SHA512
5fdc49c87f7471c00a3f098f6c68ff439042d9ba2f67146f3e469fed2848114a50275566d46a87043c91199c167752f951f2d2bdd7aaf46d707d8141b2b1c1c5
-
SSDEEP
768:/HXCNDzi66k2bTpIXdfaL2Q5csP7MZjLjKktvigpJ1qc1UOyh2jpNg7JHuOuGNUY:sfadc0ktZgh2jpNkJOOu8xlMNKaBw7Fx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5772f8b33338b4be9f67f936b1377b6_JaffaCakes118
Files
-
a5772f8b33338b4be9f67f936b1377b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea842b6124ecf2d09e56a43ed0d28981
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
GetVolumeInformationA
ResetEvent
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
WriteProcessMemory
GetProcAddress
GetModuleHandleW
VirtualAllocEx
OpenProcess
GetCurrentProcessId
ReadFile
SetFilePointer
GetWindowsDirectoryA
WriteFile
GetModuleFileNameA
SizeofResource
LoadResource
FindResourceA
lstrcpyA
GetCurrentProcess
CompareStringA
lstrlenA
CreateProcessA
GetSystemDirectoryA
CreateFileA
GetFileAttributesA
user32
wsprintfA
GetForegroundWindow
advapi32
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ