Static task
static1
Behavioral task
behavioral1
Sample
c16e51873738f963ba7162ad9975bbdc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c16e51873738f963ba7162ad9975bbdc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c16e51873738f963ba7162ad9975bbdc_JaffaCakes118
-
Size
29KB
-
MD5
c16e51873738f963ba7162ad9975bbdc
-
SHA1
80da8687b84669aef3648ec28b45a4962b7fe33a
-
SHA256
85d223f5069136d7789755c9dd9602ec81ae98e9bd6845fe684f1079e7005376
-
SHA512
95622c323d936673c964114d38b003383bade4a0a8ef845fc87dfaed81a54431929b05d348390ea351faa10a068ee1f2febf41f904e3bc0f2875b1b8f2781fb1
-
SSDEEP
768:vD7dp1VcHniHg7J049VYwMUwFWKjU2rV:r7n1VcHniHg7TLAh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c16e51873738f963ba7162ad9975bbdc_JaffaCakes118
Files
-
c16e51873738f963ba7162ad9975bbdc_JaffaCakes118.exe windows:4 windows x86 arch:x86
51b45c7c7d68483c7522656e4f449556
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallMsgFilterA
kernel32
InterlockedCompareExchange
GetDateFormatA
GetSystemTimeAsFileTime
lstrlenW
GetCommandLineA
GetCurrentProcessId
ExitProcess
HeapReAlloc
EnterCriticalSection
FileTimeToSystemTime
VirtualAlloc
QueryPerformanceCounter
WinExec
HeapFree
HeapAlloc
GetProcAddress
GetCurrentProcess
GetLastError
GetCurrentThreadId
LeaveCriticalSection
lstrlenA
CompareFileTime
GetTickCount
UnhandledExceptionFilter
SetProcessWorkingSetSize
TerminateProcess
lstrcmpiA
DeleteCriticalSection
msi
MsiDatabaseExportW
shlwapi
StrCpyNW
wnsprintfA
StrCatBuffA
StrCatBuffW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ