Static task
static1
Behavioral task
behavioral1
Sample
066123b983ff79947097f2f4516b53f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
066123b983ff79947097f2f4516b53f9_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
066123b983ff79947097f2f4516b53f9_JaffaCakes118
-
Size
276KB
-
MD5
066123b983ff79947097f2f4516b53f9
-
SHA1
83f71ef8239acc4f615c7dd15e584bd0888b432b
-
SHA256
14bd553ebcd059c44aa570be80bf299c146ee127ef1b3d8399e01c23369bd0af
-
SHA512
26a87a79ff18e826f1f233a9f13c5f2b50cb4a89d2b46094ae92de4d629939697d7008df6b48f7534ceb7e6299985e37e978ce4ac40501825363513aa1ed6168
-
SSDEEP
6144:poSGPUJrfB3+p6k/OqLVJ5bbZXegqw48gyH0YtnbvK/kFZj:ubUJrp3tkmWJtbZU8JFtrymB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 066123b983ff79947097f2f4516b53f9_JaffaCakes118
Files
-
066123b983ff79947097f2f4516b53f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
773017ff8a29d38cb50b4d1136d45559
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetStringTypeW
GetStringTypeA
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
user32
FindWindowExA
SendMessageA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
shell32
ShellExecuteA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�;v Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE