Static task
static1
Behavioral task
behavioral1
Sample
0738428f484db7a3cdd8b3b059a11fd8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0738428f484db7a3cdd8b3b059a11fd8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0738428f484db7a3cdd8b3b059a11fd8_JaffaCakes118
-
Size
24KB
-
MD5
0738428f484db7a3cdd8b3b059a11fd8
-
SHA1
11faad5be9a3f069df5506fa60df842c5497d528
-
SHA256
abe476dad8d69a7a08b7f825dec6480dbd5ca4b78540dee31eeea5c35c6cbc63
-
SHA512
d399e3c44b173c08d2982e6a7fd562894b7952ba87e48f42e5e1e68f60dd8a64b3b886d36365894e614a982f9e2ee90589571852443599b46737c2a51d1aac6a
-
SSDEEP
384:aKwI4sn3YqROuRvG+LiAP8qV3pJLFY1BhZ:aKwIznIqRc+L9P8O3fLFCBb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0738428f484db7a3cdd8b3b059a11fd8_JaffaCakes118
Files
-
0738428f484db7a3cdd8b3b059a11fd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
b9cab56d9524bfbca234b58952b18b49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
WinExec
GetSystemDirectoryA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
GetModuleFileNameA
GetProcAddress
user32
CreateWindowExA
RegisterClassExA
DefWindowProcA
SetTimer
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
KillTimer
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
msvcrt
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
sprintf
_adjust_fdiv
??2@YAPAXI@Z
__CxxFrameHandler
fwrite
fclose
fopen
_splitpath
fread
??3@YAXPAX@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE