Static task
static1
Behavioral task
behavioral1
Sample
adb40d6e5281339af5c2da03ad243437_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
adb40d6e5281339af5c2da03ad243437_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adb40d6e5281339af5c2da03ad243437_JaffaCakes118
-
Size
21KB
-
MD5
adb40d6e5281339af5c2da03ad243437
-
SHA1
794cfc4d65eefd815c03e4b1995d5bf43af969bd
-
SHA256
eedd6d810a11c1ee5155a840c15913f7a2380eab45b005c14b6fd1b6c22f04d3
-
SHA512
1dd23d39938de8ece3c59e4a65d4b328e8a5dff5a3f18de3e5cb679e7b245bafa0ba0f9e7dbe8e5d78b44e570d585c008ce2b87f59f60b84ea7c37c3e1c990e2
-
SSDEEP
384:cz4FDMtxo/1Ng7lC/mN5xtODTt7GsP/0Qhx8zo4N/mbbLUxaLJ:7FDMtxc1fOxtODTt7GsP/kMbYaF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adb40d6e5281339af5c2da03ad243437_JaffaCakes118
Files
-
adb40d6e5281339af5c2da03ad243437_JaffaCakes118.exe windows:27544 windows x86 arch:x86
515ce1dc2c9254439936fa8a0a63cda4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
InterlockedIncrement
GetVersionExA
GetCurrentThreadId
GetCurrentThreadId
SetEvent
HeapDestroy
ExitProcess
GetModuleFileNameA
HeapDestroy
HeapReAlloc
GetACP
HeapDestroy
GetStartupInfoW
VirtualAlloc
GetCurrentThreadId
GetVersionExA
LoadLibraryA
EnterCriticalSection
GetCurrentProcess
ReadFile
LocalAlloc
SetUnhandledExceptionFilter
DeleteCriticalSection
HeapDestroy
HeapDestroy
LocalFree
WaitForSingleObject
QueryPerformanceCounter
SetLastError
LocalAlloc
VirtualAlloc
LoadLibraryA
GetModuleHandleA
Sleep
GetACP
LeaveCriticalSection
HeapAlloc
SetLastError
LeaveCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetProcessHeap
GetModuleHandleW
CreateThread
WriteFile
VirtualAlloc
user32
WinHelpW
OffsetRect
MessageBoxW
LoadIconW
CreateWindowExW
GetSystemMetrics
LoadAcceleratorsW
GetKeyState
GetKeyState
GetWindowLongW
GetWindowRect
LoadStringW
GetSystemMetrics
ReleaseDC
CallWindowProcW
InvalidateRect
DrawTextW
MapWindowPoints
MessageBoxW
EndPaint
BeginPaint
GetSubMenu
EnableWindow
PeekMessageW
PostMessageW
EnableMenuItem
WinHelpW
SetWindowLongW
EnableWindow
LoadAcceleratorsW
GetWindowRect
SetRect
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ