Static task
static1
Behavioral task
behavioral1
Sample
c1d4a97bd705d5364feb734cc5706dcb_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c1d4a97bd705d5364feb734cc5706dcb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1d4a97bd705d5364feb734cc5706dcb_JaffaCakes118
-
Size
2.6MB
-
MD5
c1d4a97bd705d5364feb734cc5706dcb
-
SHA1
079503bf3cf002204c22c0e802eaf84501a946e6
-
SHA256
cd3c99034e4f240dd05cd67cb37768de74a9938efb9049a79802f527d2e4371e
-
SHA512
ce1e56a36b2a09589dd1e93d57270a1b0201371d29d08c278fc0b538eeb62151884c8606f0b79380f428d27f0674a1a7501a423c4d61282f0bd73e40d002612b
-
SSDEEP
49152:o1C+fymgdK3b1V6yFdYf4y1wGnIizt0KfAZ1:o1C+qTdg1V6yFdzyyGnIUZAZ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1d4a97bd705d5364feb734cc5706dcb_JaffaCakes118
Files
-
c1d4a97bd705d5364feb734cc5706dcb_JaffaCakes118.exe windows:4 windows x86 arch:x86
64234fe6c8580e5e74beabf747163cb6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
RemoveDirectoryA
SetCurrentDirectoryA
EnumResourceNamesA
CreateDirectoryA
lstrcpynA
GetSystemDirectoryA
Sleep
GetUserDefaultLangID
LockResource
LoadResource
SizeofResource
FindResourceA
LoadLibraryExA
lstrcmpiA
SetFileAttributesA
lstrcmpA
GetStartupInfoA
ExitProcess
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
GetProcessHeap
HeapReAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
LocalFree
GetLastError
SetLastError
GetVersionExA
WaitForSingleObject
GetCurrentDirectoryA
GetFileAttributesA
GetDriveTypeA
CreateEventA
ResetEvent
SetEvent
ReleaseMutex
MapViewOfFile
CreateFileMappingA
CreateMutexA
UnmapViewOfFile
WaitForMultipleObjects
FreeLibrary
CreateProcessA
MultiByteToWideChar
lstrcatA
CreateFileA
lstrlenW
WriteFile
CloseHandle
DeleteFileA
HeapAlloc
lstrlenA
user32
GetKeyboardType
CharNextA
GetClassNameA
SendMessageA
EnumWindows
LoadStringA
MessageBoxA
wsprintfA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegFlushKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
ole32
CoInitialize
CoUninitialize
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ