Static task
static1
Behavioral task
behavioral1
Sample
d724ac389549bd88004ba170811cc73d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d724ac389549bd88004ba170811cc73d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d724ac389549bd88004ba170811cc73d_JaffaCakes118
-
Size
21KB
-
MD5
d724ac389549bd88004ba170811cc73d
-
SHA1
8aefc95961927a0f85bffef6c365a46a4670959c
-
SHA256
afcc5599dd3bdacc307dbae7ff60ff22af4c8079ce575fdca2b00e115f734a75
-
SHA512
03699f7478dbef4effb20bf168fd75325cd0844ed261daf1a81c119073e920f85758191e354e9fb357d31d8c141921a222778d6fc1fcbc5e2da78947e8c2ab1a
-
SSDEEP
384:5I/enJZGQ1cRN7rdI5E0/sKfwrnna7GoTDcI6whu84OLCao:+/enPGQ1uNPME00KKaLB6whu84OLCao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d724ac389549bd88004ba170811cc73d_JaffaCakes118
Files
-
d724ac389549bd88004ba170811cc73d_JaffaCakes118.exe windows:4 windows x86 arch:x86
80a6301360006d6b2d021c026cf399e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
FindResourceA
GetModuleHandleA
GetSystemDirectoryA
WaitForSingleObject
SetThreadPriority
CreateThread
TerminateProcess
OpenProcess
CreateEventA
LoadResource
GetCurrentThreadId
CopyFileA
OutputDebugStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
Thread32Next
Thread32First
LockResource
DeleteFileA
WriteFile
Sleep
GetModuleFileNameA
LoadLibraryA
ExitProcess
GetWindowsDirectoryA
CreateFileA
GetFileTime
SetFileTime
GetCurrentProcess
OpenEventA
CloseHandle
user32
SendMessageA
GetWindow
EnumThreadWindows
GetWindowTextA
GetClassNameA
PostMessageA
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
CheckRadioButton
CloseDesktop
DeleteMenu
GetThreadDesktop
wsprintfA
FindWindowA
gdi32
ArcTo
BitBlt
CancelDC
Chord
Arc
CloseEnhMetaFile
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ