Static task
static1
Behavioral task
behavioral1
Sample
051a53fade0b43d2501a285cec4fac4e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
051a53fade0b43d2501a285cec4fac4e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
051a53fade0b43d2501a285cec4fac4e_JaffaCakes118
-
Size
28KB
-
MD5
051a53fade0b43d2501a285cec4fac4e
-
SHA1
c31b2eaac6db9b959c097dbf93ccf970e6fa7cd0
-
SHA256
624dfe0f892a6455c469bc1b7d645563e18b03f5b5b0ccba8c64ebaed4d3ecdf
-
SHA512
7d1321d73640b96f93d562c7e1f9163c65439e8038ec3f91587e918e9a38bc057a028c64f3cdea1acdcc576155f5cfd4d1ab36dec01249babbb8562ad4c24d19
-
SSDEEP
768:cLbLRI49FSClUZHXVMqSHJcZMQSEQ1QZe2nKLGU7F:cLpZUxXqqnMb1QILZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 051a53fade0b43d2501a285cec4fac4e_JaffaCakes118
Files
-
051a53fade0b43d2501a285cec4fac4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0df27fed029b2967fe8d5ae51089708
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
lstrcatA
lstrcpyA
SetThreadPriority
GetCurrentThread
GetCurrentProcess
Sleep
FindFirstFileA
GetModuleFileNameA
InterlockedDecrement
WideCharToMultiByte
lstrlenW
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
OpenMutexA
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
CopyFileA
DeleteFileA
CreateMutexW
GetLocalTime
ReadFile
SetFilePointer
SetFileAttributesA
WriteFile
GetCurrentDirectoryA
CreateThread
LoadLibraryA
CreateMutexA
MultiByteToWideChar
CreateToolhelp32Snapshot
LocalFree
GetLastError
Process32First
Process32Next
OpenProcess
CreateProcessW
CloseHandle
user32
FindWindowExA
SendMessageA
GetWindowThreadProcessId
wsprintfA
IsWindow
wsprintfW
CharUpperA
FindWindowA
advapi32
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetNamedSecurityInfoA
shell32
SHChangeNotify
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ole32
OleRun
CoCreateInstance
CoInitialize
oleaut32
SysAllocString
SysAllocStringLen
SysStringByteLen
VariantInit
VariantClear
SysFreeString
VariantCopy
SysStringLen
GetErrorInfo
shlwapi
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
msvcrt
_controlfp
rename
_CxxThrowException
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
memcpy
memcmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_EH_prolog
__CxxFrameHandler
memset
strchr
__getmainargs
__p___initenv
exit
_XcptFilter
strlen
_strupr
_wcsupr
wcsstr
_exit
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ