Static task
static1
Behavioral task
behavioral1
Sample
c7a79397d4e433f92e671a5ae90a6ccf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c7a79397d4e433f92e671a5ae90a6ccf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c7a79397d4e433f92e671a5ae90a6ccf_JaffaCakes118
-
Size
28KB
-
MD5
c7a79397d4e433f92e671a5ae90a6ccf
-
SHA1
b23e60d144a4a6653cd55a7b6cad79221a4cbfd2
-
SHA256
468d661e32a3d1e79399ec519d1b87bd52956b3c96201222457aa7169d720388
-
SHA512
387e9b6742f42a4297976652d1fcd798d085863c9ac90fb5c8249956dd56f25a5069cc64264d49fbaaec216a9c7a3cb7b502b780f6c701fd3524654bb144118c
-
SSDEEP
384:7DOa0jTXi9T1fHABa+8ltGn++zOtcuDOUgEMJl8dx9aNW:m7E1otkO5UgEMcdx9aNW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7a79397d4e433f92e671a5ae90a6ccf_JaffaCakes118
Files
-
c7a79397d4e433f92e671a5ae90a6ccf_JaffaCakes118.exe windows:5 windows x86 arch:x86
20502395b04e9d89e16a33da1dff47db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleFileNameA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetVersion
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
ExitProcess
GetCurrentProcess
TerminateProcess
HeapDestroy
GetStartupInfoA
GetCommandLineA
HeapCreate
VirtualFree
lstrlenA
CloseHandle
GetLastError
CreateProcessA
SearchPathA
Sleep
GetModuleHandleA
GetUserDefaultLCID
user32
DestroyMenu
GetMenuDefaultItem
CreatePopupMenu
SetCursor
LoadCursorA
LoadStringA
SendMessageTimeoutA
MessageBoxA
FindWindowA
ole32
OleInitialize
OleUninitialize
shell32
SHGetDesktopFolder
advapi32
RegCloseKey
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ