Static task
static1
Behavioral task
behavioral1
Sample
d2853c452ceb9897bd442f3b16dcf745_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2853c452ceb9897bd442f3b16dcf745_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2853c452ceb9897bd442f3b16dcf745_JaffaCakes118
-
Size
1.7MB
-
MD5
d2853c452ceb9897bd442f3b16dcf745
-
SHA1
59d5c37a4195a51977dc340681a06d109999c5bd
-
SHA256
aae54bb33f301ba30777d2e3321bd7c40889b330592c140e3980c10b1d779c65
-
SHA512
6c0a71dde9f69e1975a4bf98f0fed867a7401e7d87bcd62b435bb17e1f9f9496752af806a06d03baa5504eccd3be6d89353d78a355af3ea4fd783fd9a644390a
-
SSDEEP
49152:VknTNH7ZTwOzOVYnHOYi5Us5oQmaXWat7BguH:Vk17ZUOwYLi5UsjZztOu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2853c452ceb9897bd442f3b16dcf745_JaffaCakes118
Files
-
d2853c452ceb9897bd442f3b16dcf745_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ec30fd0f2d7e661bf2dabcfd45372a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
GetAtomNameA
EnterCriticalSection
GetModuleFileNameA
FindNextFileA
CloseHandle
WriteFile
CreateFileA
GetTempPathA
ReadFile
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
GetLastError
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetFilePointer
SetStdHandle
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW
user32
MessageBoxA
DrawIcon
GetDesktopWindow
shell32
ExtractAssociatedIconA
ShellExecuteA
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ