Static task
static1
Behavioral task
behavioral1
Sample
ac43e7e12d61c51b113461eaca5938b4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac43e7e12d61c51b113461eaca5938b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac43e7e12d61c51b113461eaca5938b4_JaffaCakes118
-
Size
66KB
-
MD5
ac43e7e12d61c51b113461eaca5938b4
-
SHA1
7d567ff04755d50a2c104d71c8d228adf3112f64
-
SHA256
5b0008d6b67964e2fae9a1a1695d62f225cf32aab233e7cc8b4e5ca1fd02804b
-
SHA512
4aea900e8e69e7a669cd2f2b43df4986af7f5d2070bcd9031affd971f60ef288ff0a1f8423786e4e122b03057b7b530df22a0eddf1f4f9429bbabe2da577e96b
-
SSDEEP
1536:WITkBXkH78XIi/YvysC3u1Gy4nhXMrcJj6XWL2:WITkBXkHQYi/7sCwGy4nhXMgj6XWL2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac43e7e12d61c51b113461eaca5938b4_JaffaCakes118
Files
-
ac43e7e12d61c51b113461eaca5938b4_JaffaCakes118.exe windows:5 windows x86 arch:x86
c2dd4ad0eb86cc944e7c652fd745395d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_controlfp
__set_app_type
strchr
_exit
_acmdln
_XcptFilter
exit
__setusermatherr
__getmainargs
_initterm
__p__fmode
_adjust_fdiv
__p__commode
_except_handler3
sprintf
advapi32
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
kernel32
GetProfileStringA
GetCurrentDirectoryA
GetSystemInfo
lstrcmpA
WriteProfileStringA
GetModuleHandleA
MultiByteToWideChar
GetStartupInfoA
DeleteFileA
GetVersionExA
GetShortPathNameA
SetLastError
GetPrivateProfileStringA
lstrcatA
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetFileAttributesA
GetSystemDirectoryA
CompareStringA
lstrcpyA
ExpandEnvironmentStringsA
GetTempFileNameA
GetCommandLineA
GetTempPathA
CloseHandle
WriteFile
CreateFileA
WritePrivateProfileStringA
lstrcmpiA
user32
GetDesktopWindow
LoadStringA
shell32
SHGetMalloc
SHChangeNotify
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoUninitialize
OleInitialize
OleUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ