Static task
static1
Behavioral task
behavioral1
Sample
ce12d501a13506a39b343aab65e01d62_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce12d501a13506a39b343aab65e01d62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce12d501a13506a39b343aab65e01d62_JaffaCakes118
-
Size
90KB
-
MD5
ce12d501a13506a39b343aab65e01d62
-
SHA1
b1178cd3e9d4c487ad14e9f57cd330b4171382aa
-
SHA256
97e3a329ef03140fccdadb53e65fa5d77885061c78a3d8f551cd81eb3664755a
-
SHA512
b6034f45c00455a4553a8fe3bdc88fb0d75e86e891a55ecc7cb3bd307f675715993b2350fd9d0cffda08d0945d3a72a955b590acf3d22fdef559a9c280641c04
-
SSDEEP
1536:CeD2q8PV70/+pS92O+LgmKlVX2p/gbXO/XcJ7vGdxd1I3g:CxH3KlVM/qX/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce12d501a13506a39b343aab65e01d62_JaffaCakes118
Files
-
ce12d501a13506a39b343aab65e01d62_JaffaCakes118.exe windows:4 windows x86 arch:x86
7bd7475b9a52d9fdc5050a8805beb6fb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CloseHandle
CreateMutexA
ReleaseMutex
WaitForSingleObject
ReadFile
WriteFile
GetFileSize
CreateFileA
SetPriorityClass
GetCurrentProcess
GetTickCount
SetThreadPriority
GetCurrentThread
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualFree
LocalAlloc
VirtualAlloc
MapViewOfFileEx
CreateFileMappingA
OpenFileMappingA
VirtualProtect
MapViewOfFile
SearchPathA
FreeLibrary
ExitProcess
CreateProcessA
CopyFileA
GetFileAttributesA
GetFullPathNameA
lstrcatA
GetSystemDirectoryA
GetLastError
DeleteFileA
GetCommandLineA
ExpandEnvironmentStringsA
GetShortPathNameA
GetTempPathA
GetVersionExA
WriteProcessMemory
OpenProcess
lstrcpynA
GetComputerNameA
lstrcpyA
LocalFree
lstrcmpiA
HeapFree
GetProcessHeap
HeapAlloc
UnmapViewOfFile
Sleep
user32
RegisterClassA
wsprintfA
wvsprintfA
DefWindowProcA
advapi32
RegQueryValueExA
RegConnectRegistryA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
GetUserNameA
RegOpenKeyExA
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.plugins Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pp6v573s Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0x5pvl1k Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ