Static task
static1
Behavioral task
behavioral1
Sample
c0f359dd0139876561a654a8859c7fe0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0f359dd0139876561a654a8859c7fe0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0f359dd0139876561a654a8859c7fe0_JaffaCakes118
-
Size
176KB
-
MD5
c0f359dd0139876561a654a8859c7fe0
-
SHA1
e8c341cd8304bbb7d86af40c0e6676b3597358dc
-
SHA256
03ecbe96e2c31f44258982dee5579c3e3becc03c4c95f84fa5843a10f17c4a52
-
SHA512
6e6a8655a5f7cb30c37ba7dbf4e7dafe6af4a3ddf34269de463f7cc9db1008b55296c228d651773a8161f16eef49daebf1b1c91f792d94ee047306217c639666
-
SSDEEP
3072:IRP32ngkyHj233/cu7gcULzvSoCbfiWKxcAUvLUdzcuelcD:gPGngk48/cuFIaXbfiDxrUTUKBWD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0f359dd0139876561a654a8859c7fe0_JaffaCakes118
Files
-
c0f359dd0139876561a654a8859c7fe0_JaffaCakes118.exe windows:4 windows x86 arch:x86
a11cbaab0f2d505432925275e3ed6bac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
GetCurrentProcess
CreateFileA
LoadLibraryA
LCMapStringA
user32
CloseWindow
CharLowerBuffA
wsprintfA
SetWindowLongA
CreateWindowExA
advapi32
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegEnumValueA
RegCloseKey
RegDeleteValueA
RegQueryValueA
Sections
.text Size: 152KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ