Static task
static1
Behavioral task
behavioral1
Sample
cdf117b63d21ba52ef102d39bf6764ea_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
cdf117b63d21ba52ef102d39bf6764ea_JaffaCakes118
-
Size
188KB
-
MD5
cdf117b63d21ba52ef102d39bf6764ea
-
SHA1
bb3856ce487a7c619e43feb1bf5f420cd56cd3b2
-
SHA256
e3d7b8154fcb1856594e4ff47b7fe9806e969b8c1c64c5fe9fde96211ee920cc
-
SHA512
63957b8703c8a995af63da425fe99e92b69ef91a1f5669255122268b2d883ef976d8098e0d3271ceb7c26b1606a38b94e1b20600b0998433f24ff1b87d032481
-
SSDEEP
3072:vWSlNq+4kjxFY4ne4p2BWdhuWyqt4zYXbchO7zg4BzKwLCfaIu8xf3ri3XelaV9b:OdQJg4j13nLhPg4BzKwLCsMyfNYktT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdf117b63d21ba52ef102d39bf6764ea_JaffaCakes118
Files
-
cdf117b63d21ba52ef102d39bf6764ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
03d91d16c77eb0ee9728b9dd4702dc2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
GetCurrentThreadId
LocalFree
OutputDebugStringW
GlobalFindAtomA
VirtualQuery
GetCurrentProcess
CreateDirectoryW
GetModuleFileNameW
DuplicateHandle
GetFileAttributesW
lstrcmpiW
ExitProcess
MultiByteToWideChar
EnumResourceLanguagesW
SearchPathW
SetEnvironmentVariableW
SetLastError
lstrlenW
GetFileInformationByHandle
GetModuleHandleA
VirtualProtect
GetPrivateProfileStructA
WideCharToMultiByte
LocalAlloc
OutputDebugStringA
GetCurrentDirectoryW
InterlockedExchange
oleacc
CreateStdAccessibleObject
shlwapi
StrRetToBSTR
PathAppendA
PathIsContentTypeA
PathIsFileSpecA
SHCreateStreamOnFileEx
PathCreateFromUrlW
Sections
.text Size: 97KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ