Static task
static1
Behavioral task
behavioral1
Sample
d45511aff05917548a7c831d3c520ddc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d45511aff05917548a7c831d3c520ddc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d45511aff05917548a7c831d3c520ddc_JaffaCakes118
-
Size
50KB
-
MD5
d45511aff05917548a7c831d3c520ddc
-
SHA1
3bc7dc11a2a90001db635a6b669aaeb67f2ff9a9
-
SHA256
fe7bc652da31c5dd53a589ae197ffc0540b934bfb0999253255a855c4123310f
-
SHA512
f8e5404babbcf4b02403d9ab8c171025c373c865a813ed39f999272985e2926d2a9a2e80bd4a61cc061c5f7ae4b607f25f80e4f750e12e690105805fcde9dc02
-
SSDEEP
1536:ODpB522UNEczhDE65nppAvXQfoKzRhaG:ODpB52RNxhrDAvgfaG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d45511aff05917548a7c831d3c520ddc_JaffaCakes118
Files
-
d45511aff05917548a7c831d3c520ddc_JaffaCakes118.exe windows:5 windows x86 arch:x86
5febc710790290ec967ae34a5dc45c4e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueA
kernel32
CloseHandle
shlwapi
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA
user32
CloseDesktop
DispatchMessageA
FindWindowExA
GetClassNameA
GetWindowLongA
GetWindowTextA
MsgWaitForMultipleObjects
OpenWindowStationA
PeekMessageA
SetThreadDesktop
Sections
.ncd Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xurir Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dohyf Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ