Static task
static1
Behavioral task
behavioral1
Sample
acad0657547b3ffa9fe7152dc9f25c77_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
acad0657547b3ffa9fe7152dc9f25c77_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acad0657547b3ffa9fe7152dc9f25c77_JaffaCakes118
-
Size
61KB
-
MD5
acad0657547b3ffa9fe7152dc9f25c77
-
SHA1
001cd528cc2ef80c4f754a6d582a880aefe7bc01
-
SHA256
3d0c288cf24c17dfe36786cd0c3f2e4136849abbe227560b92165a214be38baf
-
SHA512
f21f603d90d0dc57a9b080867d325f8f3ca79a894071344601591eb845cd288382d28e1cad63edbe7bb0e30a0451650baa6786ae4dcaf0f0d7fbd65ce7fdcd43
-
SSDEEP
1536:xBrXFru4SDEd8f2tZoPAcQLbfj9CGzCjZimRm8cZsu:z4t2temEU8ImY8cZsu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acad0657547b3ffa9fe7152dc9f25c77_JaffaCakes118
Files
-
acad0657547b3ffa9fe7152dc9f25c77_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e760fa6f3e5fa6bd1404ef93ccd541f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCombineW
PathRemoveFileSpecW
StrCmpNIW
PathMatchSpecW
PathFindFileNameW
wnsprintfA
wvnsprintfW
StrCmpNIA
wnsprintfW
StrStrW
kernel32
FindFirstFileW
VirtualAlloc
WideCharToMultiByte
EnterCriticalSection
GetTickCount
GetCommandLineA
GetFileAttributesW
VirtualProtect
LeaveCriticalSection
GlobalUnlock
ExpandEnvironmentStringsW
ReleaseMutex
GetSystemTimeAsFileTime
GlobalLock
InitializeCriticalSection
Sleep
lstrlenA
GetSystemTime
GetVersionExW
FindNextFileW
lstrcmpiA
GetUserDefaultUILanguage
advapi32
CryptAcquireContextW
DuplicateTokenEx
CryptHashData
CryptReleaseContext
GetUserNameW
RegSetValueExA
RegCreateKeyExA
RegCloseKey
CryptGetHashParam
RegEnumKeyExA
CryptDestroyHash
user32
GetKeyState
GetDlgItemTextA
FindWindowExA
DrawIcon
GetDlgItem
DispatchMessageA
GetIconInfo
GetWindowLongA
GetKeyboardState
GetMessageA
GetWindowThreadProcessId
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE