Static task
static1
Behavioral task
behavioral1
Sample
d7448faadf889fcf559ceb77f284ade1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d7448faadf889fcf559ceb77f284ade1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d7448faadf889fcf559ceb77f284ade1_JaffaCakes118
-
Size
30KB
-
MD5
d7448faadf889fcf559ceb77f284ade1
-
SHA1
0cdfc7ead1ad90f091b995261dab8ee63ae8e82f
-
SHA256
e5c7dbe74fbe0ccd7b7be21ba42f546eb4ae39650714b3279e8c1a27d36abd38
-
SHA512
b6d84ab2ff40bf0041df42c7d0e9096f672f2374615732ad2e852a076d2e3bf986e317c68b6bde99a32c017a85639efbd49362c0b473393cf81e38a60a9a9a86
-
SSDEEP
768:CJPZ+1Ct3h7TwS88Sm/ejdCl8UZ1bZOBv/evhONlaGNI1T:gPI1CxhHHydCt1sBpNq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7448faadf889fcf559ceb77f284ade1_JaffaCakes118
Files
-
d7448faadf889fcf559ceb77f284ade1_JaffaCakes118.exe windows:1 windows x86 arch:x86
c3bd0f336995f6bfd8654e4ee8c51860
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
comctl32
InitCommonControlsEx
InitCommonControls
kernel32
CloseHandle
CreateFileA
ExitProcess
FindClose
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
SetFilePointer
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
FlushInstructionCache
GetCommandLineA
GetSystemDirectoryA
lstrcmpiA
VirtualProtect
LoadLibraryExW
IsBadReadPtr
ole32
CoInitialize
CoUninitialize
oleaut32
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantClear
user32
MessageBoxA
MessageBoxW
SendMessageA
SetWindowTextA
KillTimer
SetTimer
SetWindowsHookExA
UnhookWindowsHookEx
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ