Static task
static1
Behavioral task
behavioral1
Sample
ff2b190ba4643a50061d0e35720ee5a3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff2b190ba4643a50061d0e35720ee5a3_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ff2b190ba4643a50061d0e35720ee5a3_JaffaCakes118
-
Size
28KB
-
MD5
ff2b190ba4643a50061d0e35720ee5a3
-
SHA1
5804f18afa48d9fb4cb6a07bc32f8511aa22deda
-
SHA256
e308359aba0be59adb8acc6563ce93c978693f81568ffd01abc25a9b61346368
-
SHA512
d614e3f424af13ae177170d52dc6b4e0a9095a56b00ce83559f5c509b8f3f196cd65f3c339e92cf9bd211c14ca566da2bcdf4c184ea2a211134b55a1d0506ca5
-
SSDEEP
384:UkpRFyN8INAIrcIKUq3gHrMug4aqg9BnZXj18MIWY:BtlINAIrzKGMug4rg9BZXJs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff2b190ba4643a50061d0e35720ee5a3_JaffaCakes118
Files
-
ff2b190ba4643a50061d0e35720ee5a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
b444da3cadab7d9518ad2698de199348
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
WaitForSingleObject
CreateMutexA
GetLastError
GetCurrentProcess
GetCurrentThread
OpenProcess
VirtualFreeEx
GetExitCodeThread
CreateRemoteThread
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
GetCurrentProcessId
DeviceIoControl
Sleep
GetStartupInfoA
GetModuleFileNameA
FindFirstFileA
FindNextFileA
FindClose
FreeLibrary
LoadLibraryA
GetProcAddress
CloseHandle
GetShortPathNameA
GetVersionExA
GetWindowsDirectoryA
GetFileAttributesA
GetSystemDirectoryA
lstrcatA
Process32Next
user32
DispatchMessageA
TranslateMessage
GetMessageA
PostMessageA
FindWindowExA
PostQuitMessage
DestroyWindow
SetTimer
DefWindowProcA
KillTimer
RegisterClassExA
CreateWindowExA
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
OpenThreadToken
ole32
CoInitialize
CoUninitialize
shlwapi
SHDeleteValueA
StrStrIA
PathFileExistsA
PathCombineA
SHSetValueA
SHGetValueA
msvcrt
free
_strlwr
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
strrchr
_strnicmp
_except_handler3
sprintf
realloc
strstr
??3@YAXPAX@Z
??2@YAPAXI@Z
_snprintf
__CxxFrameHandler
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ