Static task
static1
Behavioral task
behavioral1
Sample
de87246ca9f9843e4ed6e3c5cd99036d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de87246ca9f9843e4ed6e3c5cd99036d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de87246ca9f9843e4ed6e3c5cd99036d_JaffaCakes118
-
Size
136KB
-
MD5
de87246ca9f9843e4ed6e3c5cd99036d
-
SHA1
be003f7d0e36a3cdf6821ef12df734f19a7bfbe9
-
SHA256
254d0f0fcf9d5e47dd19a3f88f62fac5dcb2325c3e178cc6cfe0d2440137f0cd
-
SHA512
73bdf4fbe3af18f319750cec22a470866b59eee7f7f18a24932c953fad65317ab29c40402ae355bfe26b9459cfe241a8166ab8ab8da6539498578d6e78245ade
-
SSDEEP
1536:L2GOX6d+nWnMLObVjMUkq+CQ0U17x70OyesMdvFJ0CMsmGlZvy6gmFnToIfBYz/F:LyXmAbswvFJ0IvyjmtTBfBYTNb/z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de87246ca9f9843e4ed6e3c5cd99036d_JaffaCakes118
Files
-
de87246ca9f9843e4ed6e3c5cd99036d_JaffaCakes118.exe windows:4 windows x86 arch:x86
d492e999033306fcf1504f179b92f524
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
CreateRemoteThread
GetProcAddress
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
lstrlenA
GetStartupInfoA
lstrcatA
CloseHandle
WriteFile
CreateFileA
GlobalFree
LockResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
ResumeThread
CreateProcessA
GetSystemDirectoryA
user32
wsprintfA
MessageBoxA
advapi32
RegSetValueExA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
mfc42
ord535
ord537
ord800
ord924
msvcrt
__dllonexit
_onexit
_exit
__CxxFrameHandler
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
msvcp60
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ