uupbaknj
Static task
static1
Behavioral task
behavioral1
Sample
d98529101af3a45742c05daabffd14d4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d98529101af3a45742c05daabffd14d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d98529101af3a45742c05daabffd14d4_JaffaCakes118
-
Size
51KB
-
MD5
d98529101af3a45742c05daabffd14d4
-
SHA1
24a81b6b77d08b1a9d96dfced34290da8fedcc64
-
SHA256
143761bac281d69b3681def3e9ba1fbbb12f2471da3c4b0f510889cf7fcdc4b3
-
SHA512
3c8939992677af4a7225184bff3fd8e2b92000bbde12e034166d5ab5bbb5499083ae46792c99bc3fa1f3f7f98f6a27a3b8af291f919f04a7473b946eafb38833
-
SSDEEP
1536:OuKxQTIwnpP0ATfN+WRwXSveDvThCHV/GD9RuYe5dhq:O/iswn2S9RoSwh6tGWl5G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d98529101af3a45742c05daabffd14d4_JaffaCakes118
Files
-
d98529101af3a45742c05daabffd14d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
61a0139638d356954c22d0bad7b7b8de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHEnumKeyExA
UrlCanonicalizeA
kernel32
SetComputerNameExA
ExitProcess
GetComputerNameA
GetBinaryTypeA
GetFileType
CancelIo
CallNamedPipeA
BackupSeek
BackupRead
lstrcmpA
lstrlenW
lstrlenA
SetCurrentDirectoryA
GetDriveTypeW
GetWindowsDirectoryA
GetCurrentDirectoryA
GetComputerNameW
GetCurrentDirectoryW
lstrcmpW
HeapAlloc
GetProcessHeap
HeapFree
GetDriveTypeA
advapi32
GetUserNameA
GetUserNameW
winmm
DrvGetModuleHandle
GetDriverModuleHandle
mmioOpenA
Exports
Exports
Sections
.code Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ