Static task
static1
Behavioral task
behavioral1
Sample
b10921a60bd532a688a2f9280fd3c710_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b10921a60bd532a688a2f9280fd3c710_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b10921a60bd532a688a2f9280fd3c710_JaffaCakes118
-
Size
27KB
-
MD5
b10921a60bd532a688a2f9280fd3c710
-
SHA1
6981b2d3ee2cc3a0a1c3828fccd5de5be91b2422
-
SHA256
ff611353cee937c96a07ad609aa724e417c5f63d9ed8d3d0a63510896ab6c00a
-
SHA512
ef712c0d5983934482cb8bac53f9f88fcc46c0e069400fd49ff199979809888d8bc386f75abdb1486263bd59c694a4e4ab9dc1b9bb82db3fc675b69ceaf1a7a8
-
SSDEEP
768:MCZSkhaKMwYROblfwrlj3Bv2XKJF3hR0kIvM:MCZSkgKrhfwrlj3Bv2XKJJjQv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b10921a60bd532a688a2f9280fd3c710_JaffaCakes118
Files
-
b10921a60bd532a688a2f9280fd3c710_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d4c49f4fbf97038a110e24172ea89f8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CreateEventA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
WaitForSingleObject
HeapAlloc
GetProcessHeap
HeapFree
Sleep
GetModuleHandleA
GetCommandLineA
lstrlenA
SetEvent
CreateProcessA
CreateThread
lstrcmpA
ResetEvent
WaitForMultipleObjects
FindResourceA
LoadResource
WaitForSingleObjectEx
WriteFileEx
Process32First
CompareStringA
CloseHandle
DeleteFileA
ExitThread
GetModuleFileNameA
lstrcpyA
ExitProcess
lstrcatA
user32
TranslateMessage
GetForegroundWindow
DestroyWindow
PeekMessageA
GetDesktopWindow
DispatchMessageA
CreateWindowExA
MsgWaitForMultipleObjects
wsprintfA
IsChild
advapi32
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegNotifyChangeKeyValue
ole32
CoInitialize
CoUninitialize
gdi32
SelectObject
shell32
SHGetFolderPathA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ