Static task
static1
Behavioral task
behavioral1
Sample
c9463682a972872bd3a3351db47b9156_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c9463682a972872bd3a3351db47b9156_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c9463682a972872bd3a3351db47b9156_JaffaCakes118
-
Size
12KB
-
MD5
c9463682a972872bd3a3351db47b9156
-
SHA1
c89f36f744d688b05981e600c77b0dcb3dde0be0
-
SHA256
fa0133cc020a37f35f0b34915e477ecd382e0340278f1f1ad1f8f2867d3dab93
-
SHA512
92c2b6f9bc2009fa21a8d1464c3c1286e5a2d2bdc408c1994c2993e4ab010cb180064a140f0c74b063db244a19f1835e7df41d1093f530211316a4e9bf02b61c
-
SSDEEP
192:Eb46c9iy0DLAapb4emNETNmkSLJNcGGRRmGg8hTMf11pydDMkkTl:EbC70XAapkvEQzcRRE3ydDqJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9463682a972872bd3a3351db47b9156_JaffaCakes118
Files
-
c9463682a972872bd3a3351db47b9156_JaffaCakes118.exe windows:4 windows x86 arch:x86
d1872d8b9c15571bc850fa7898f9a073
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetFileInformationByHandle
CreateFileA
lstrcatA
GetSystemDirectoryA
GetProcAddress
LocalFree
Sleep
GlobalUnlock
GlobalLock
GlobalAlloc
ReadFile
lstrlenA
OpenProcess
lstrcpyA
CopyFileA
LoadLibraryA
IsBadReadPtr
GetVersionExA
GetModuleFileNameA
GetCurrentProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapFree
GetModuleHandleA
CreateToolhelp32Snapshot
Process32First
CloseHandle
lstrcmpiA
lstrcmpA
Process32Next
RtlUnwind
user32
GetClipboardData
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
advapi32
LookupPrivilegeValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetSecurityInfo
GetUserNameA
SetEntriesInAclA
SetSecurityInfo
OpenProcessToken
AdjustTokenPrivileges
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ