Static task
static1
Behavioral task
behavioral1
Sample
ce3a8ffd7e89db402919aa7441da149d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce3a8ffd7e89db402919aa7441da149d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce3a8ffd7e89db402919aa7441da149d_JaffaCakes118
-
Size
188KB
-
MD5
ce3a8ffd7e89db402919aa7441da149d
-
SHA1
51be915e1de8e0b3c49d2243922ed9e5e8e3402e
-
SHA256
5b6f8cb0850343179cf86e1539071d37f9fd616ab05d1745bc1e84a070add001
-
SHA512
4f6ef0c919b185d9f2c1e1acd74421c301e143b712e8d8ea593f538e7f42849d0d3d299db32a14f452acc305ee345036448e8f0778f028225104fc2426761a65
-
SSDEEP
3072:S3FePjSt6LMuuU2Yv9JF49IKXssKWvCotduJuZBLP7dJXVEqrgeodCAxz/q+ZZaG:bPjSt6L3uU2YFJm1XsOvC9eP7dJFEQqb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce3a8ffd7e89db402919aa7441da149d_JaffaCakes118
Files
-
ce3a8ffd7e89db402919aa7441da149d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2884259dd7cefad667262149dcdb2658
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
LoadLibraryA
LCMapStringA
user32
CloseWindow
CharLowerBuffA
wsprintfA
SetWindowLongA
CreateWindowExA
advapi32
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegDeleteValueA
Sections
.text Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ