Static task
static1
Behavioral task
behavioral1
Sample
f9b2a470cc421b7f723f8810ba4cd4e3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9b2a470cc421b7f723f8810ba4cd4e3_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f9b2a470cc421b7f723f8810ba4cd4e3_JaffaCakes118
-
Size
175KB
-
MD5
f9b2a470cc421b7f723f8810ba4cd4e3
-
SHA1
4a8cbab43d273dc95c772a2eac0299e902034528
-
SHA256
36fd34fd1f33b972d0608c4ba47a37fb21111ca195a9978ac5aa0fc4dc86256d
-
SHA512
c58e966e60974426cca4b7625fad2999f033ec672947d091ad56d61b4348f5db5d924b9f436d934a038c044c536d01bbdcf4961054a13136c4ba5914e5814312
-
SSDEEP
3072:v8Nk3VzbZi5Wu5IYnX++t2+e6biao3A3G4JjJqVtcnePN:v7s5dIYnX+6xbiaow3GIGm2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9b2a470cc421b7f723f8810ba4cd4e3_JaffaCakes118
Files
-
f9b2a470cc421b7f723f8810ba4cd4e3_JaffaCakes118.exe windows:5 windows x86 arch:x86
da2529e50eafb55e2b4f7e1d27da4c87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrlenA
GetTempFileNameA
lstrcmpA
GetTempPathA
ExitProcess
GetCurrentThreadId
GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQueryEx
GetModuleHandleA
GetThreadContext
GlobalFree
TerminateProcess
ResumeThread
VirtualFree
OpenProcess
VirtualAlloc
lstrcpyA
user32
wsprintfA
OpenInputDesktop
GetThreadDesktop
SetThreadDesktop
GetWindowThreadProcessId
CloseDesktop
FindWindowA
shlwapi
SHGetValueA
advapi32
CreateProcessAsUserA
OpenProcessToken
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE