Static task
static1
Behavioral task
behavioral1
Sample
048519864e6b525823ede11413ddda52_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
048519864e6b525823ede11413ddda52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
048519864e6b525823ede11413ddda52_JaffaCakes118
-
Size
17KB
-
MD5
048519864e6b525823ede11413ddda52
-
SHA1
0ca7e5915d476be038d799cdda2bba38bb55651e
-
SHA256
7f33c1e706acde70af64d32ee90d4cd782ede4879c06a069362a4955786e31db
-
SHA512
23002ea327b21157301ec1928b90449b07f96eda8ee319176576cb8c74267fbf29ce6c4216f92b03e8695b53a88858698b52cd673912ca5f4f99f13d721b7ed2
-
SSDEEP
96:aa8qz+OHfQCtglhPgBXAwzP6WKnW/DkxuMmQO54OKq5RSy6:j7/glxA6WKW/xMmt285RSy6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 048519864e6b525823ede11413ddda52_JaffaCakes118
Files
-
048519864e6b525823ede11413ddda52_JaffaCakes118.exe windows:4 windows x86 arch:x86
a6f14ca6a429bcde832b7d851b4f1978
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
msvcrt
__p___initenv
_initterm
_XcptFilter
_exit
fwrite
fseek
fopen
__p__fmode
__set_app_type
_except_handler3
_controlfp
fread
fclose
exit
isdigit
atoi
_getch
printf
puts
__p__commode
__getmainargs
__setusermatherr
_adjust_fdiv
_cgets
_access
kernel32
GetLastError
FormatMessageA
CreateFileA
CreateFileMappingA
GetFileInformationByHandle
MapViewOfFile
UnmapViewOfFile
CloseHandle
IsBadReadPtr
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE