Static task
static1
Behavioral task
behavioral1
Sample
041d0387ac956ae50477bec229285c40_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
041d0387ac956ae50477bec229285c40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
041d0387ac956ae50477bec229285c40_JaffaCakes118
-
Size
396KB
-
MD5
041d0387ac956ae50477bec229285c40
-
SHA1
610d15c7cae6505596449a05d957911aded5d948
-
SHA256
1f0200880b7853e390c3e7bf41d82a6325fa6a32d8bac4822adbb035971c5045
-
SHA512
834fbcbcdfe8775d57345592e764ae2c0e3c8b8ef4f2eedcb6ebce0d862b5e4e486e06c1ecd5cce31952c7640ce0dd3834a25d5349388bb08b93ea67952c6e57
-
SSDEEP
12288:eeGxhD5NOZ2i269yeJ6CCDFDT7YwmD5geVR:hKlgZ2Nm6CYf7YwmD5gQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 041d0387ac956ae50477bec229285c40_JaffaCakes118
Files
-
041d0387ac956ae50477bec229285c40_JaffaCakes118.exe windows:4 windows x86 arch:x86
016ec44553e94503b3f8a96d4a262888
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapCreate
LeaveCriticalSection
SetFileTime
FormatMessageW
FindResourceA
lstrcatA
CloseHandle
GetFileSize
GetCurrentDirectoryW
GetModuleHandleA
SetFileTime
InitializeCriticalSection
IsBadStringPtrW
SetFileAttributesW
CreateMutexA
GetStartupInfoW
ReadFile
SetFileTime
lstrcpyA
GetLastError
GetLocalTime
msi
MsiCloseHandle
MsiAdvertiseProductA
MsiCloseAllHandles
MsiCreateRecord
user32
wsprintfW
SetCursorPos
GetWindowLongW
GetWindowRect
LoadCursorW
IsWindow
PostMessageW
GetWindowTextA
DispatchMessageA
SetFocus
IsDialogMessageA
IsZoomed
PeekMessageW
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 211B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE