Static task
static1
Behavioral task
behavioral1
Sample
f54634f7c74c698b254824d6936789f5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f54634f7c74c698b254824d6936789f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f54634f7c74c698b254824d6936789f5_JaffaCakes118
-
Size
124KB
-
MD5
f54634f7c74c698b254824d6936789f5
-
SHA1
787b7b47d386ed13a84233d0e81840501af4d7d9
-
SHA256
8105919fa23fec55e71eb7e18f50b792c2cd06413a11f7803016c239338437a2
-
SHA512
d7a4e567f5a3c13297ae30f0193cd8285fcc5fd4dd8309ac69f6d5816311867cb3b0830287f40bc6f586ccc30ede3141aed63237897faa235911c9aa82873b64
-
SSDEEP
3072:cPmwWHs7Ow932poZR1sIfH/zDKTPVMjT1lZ:cPmwgszN2gH/zGTPalZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f54634f7c74c698b254824d6936789f5_JaffaCakes118
Files
-
f54634f7c74c698b254824d6936789f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
0bebf286a1287963da14d7eef5a608cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
ExitProcess
GetModuleHandleA
CloseHandle
lstrcmpiA
GetCurrentProcess
DeleteFileA
MoveFileA
WriteFile
lstrlenA
SetFilePointer
lstrcatA
lstrcpyA
SetLastError
GetLastError
Sleep
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateDirectoryA
SetUnhandledExceptionFilter
GetCommandLineA
CreateMutexA
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
user32
wsprintfA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
LoadIconA
shell32
ShellExecuteA
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
memset
??2@YAPAXI@Z
memcpy
strtok
__CxxFrameHandler
_except_handler3
strlen
??3@YAXPAX@Z
rand
malloc
atoi
strchr
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
Sections
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1100 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ