Static task
static1
Behavioral task
behavioral1
Sample
abde1a35571f0de55059d9d7a87fb6b1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
abde1a35571f0de55059d9d7a87fb6b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abde1a35571f0de55059d9d7a87fb6b1_JaffaCakes118
-
Size
116KB
-
MD5
abde1a35571f0de55059d9d7a87fb6b1
-
SHA1
c8643d0f22b72a738616fb9c5a1871435369b89e
-
SHA256
0cf4896f7af245d2d275b1565b464f91d01d2e2eb9209e0992230186a2a75689
-
SHA512
28eaea35f036e5da68c25d9a4a2258415c631b3482762a5ae4f3e75bfc5b63fafc455a118da869cd81ddb0267e861fac961c7c92433e9dd86807151b4a15c99a
-
SSDEEP
3072:ih+X+qEiBl6dehhlSJ4ROZ4OwaGelG4hW45:Q+X+UBPhlSJSaGnF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abde1a35571f0de55059d9d7a87fb6b1_JaffaCakes118
Files
-
abde1a35571f0de55059d9d7a87fb6b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
83b725f41bf0574e5527e192074205a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
__CxxFrameHandler
_mbscmp
exit
_XcptFilter
_exit
_onexit
__dllonexit
_setmbcp
_CxxThrowException
_controlfp
wcslen
kernel32
InterlockedDecrement
MultiByteToWideChar
GetModuleHandleA
GetLastError
GetStartupInfoA
lstrlenA
CloseHandle
WideCharToMultiByte
LocalFree
CreateProcessA
user32
WaitForInputIdle
EnableWindow
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
ole32
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleRun
CoInitialize
Sections
.code Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ass Size: 89KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ