Static task
static1
Behavioral task
behavioral1
Sample
b46b57c1991845dee187d26925792808_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b46b57c1991845dee187d26925792808_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b46b57c1991845dee187d26925792808_JaffaCakes118
-
Size
201KB
-
MD5
b46b57c1991845dee187d26925792808
-
SHA1
07358445b93fc975afaca7236fd5afd0fcce76c7
-
SHA256
2c8c8d84d10c130d1304c78c6414518b2d4ac792ba0e0e898f335658d13982ca
-
SHA512
e5558e4a45a4cbbe010ab36d22bf78cbeb4ee87b42e5d9bacb196a4db6e8cc1f496c8f02c5246614973dfedeeb8aa754cc9259f685f99bdf0d9cc4105c6dafc0
-
SSDEEP
3072:61JyOQNkUL8h+DjzUIWkufBHtSyt+QgaSBZdVkfC1NJVqBh4PZtp:syOQqUL8h6zNup3glTseNjqBUV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b46b57c1991845dee187d26925792808_JaffaCakes118
Files
-
b46b57c1991845dee187d26925792808_JaffaCakes118.exe windows:5 windows x86 arch:x86
ce1fc7d59961252ca22791a02e589bf5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RtlUnwind
VirtualFree
ResumeThread
TerminateProcess
GlobalFree
CreateProcessA
GetThreadContext
GetModuleHandleA
VirtualQueryEx
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalAlloc
VirtualAlloc
ExitProcess
GetTempPathA
lstrcmpA
GetTempFileNameA
CreateFileA
WriteFile
CloseHandle
WaitForSingleObject
lstrcpyA
lstrcatA
lstrlenA
GetCurrentThreadId
GetLastError
OpenProcess
FindAtomA
user32
InflateRect
IsWindowVisible
CreateWindowExA
OpenInputDesktop
GetThreadDesktop
wsprintfA
GetCursorPos
SetThreadDesktop
GetFocus
FindWindowA
RegisterClassExA
GetWindowThreadProcessId
EqualRect
CloseDesktop
ClientToScreen
shell32
ShellExecuteA
shlwapi
SHGetValueA
advapi32
CreateProcessAsUserA
OpenProcessToken
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE