Static task
static1
Behavioral task
behavioral1
Sample
d373466bd3ef7e42f5bbe8c3d36c9bf3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d373466bd3ef7e42f5bbe8c3d36c9bf3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d373466bd3ef7e42f5bbe8c3d36c9bf3_JaffaCakes118
-
Size
186KB
-
MD5
d373466bd3ef7e42f5bbe8c3d36c9bf3
-
SHA1
bfc4fcec0a139633f56b2ebc02e2d1a05de2bc7a
-
SHA256
042ffadc1921fe660a4a7d7720250c2b968690e31d86452f0276856aabd4b22f
-
SHA512
cd45992ecbc5f6e44518388eff1cf0d4aace0a6ad388733b36d9e601b6d913f7ca8aa94b427bdeb1b8512e3157db7625e5e87ae43178f455eb900f51aa328256
-
SSDEEP
3072:JSIVPH2h+50LLhLwTZP16GYdPYSTuEgv3fS7lrvbsXkzhPCabuyQ:p+YYLhQ1Rk1TuTvPSVvOkNPCag
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d373466bd3ef7e42f5bbe8c3d36c9bf3_JaffaCakes118
Files
-
d373466bd3ef7e42f5bbe8c3d36c9bf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
d9397b21ea1169eeef37caed5aa1091f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
LCMapStringA
GetCurrentProcess
CloseHandle
ExitProcess
user32
CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
advapi32
RegSetValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegCreateKeyA
Sections
.text Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ