Static task
static1
Behavioral task
behavioral1
Sample
075e429cd59099875b0afee01870f052_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
075e429cd59099875b0afee01870f052_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
075e429cd59099875b0afee01870f052_JaffaCakes118
-
Size
817KB
-
MD5
075e429cd59099875b0afee01870f052
-
SHA1
0c2b86dfe8eeffeacd6ef0391ebd709afb19d720
-
SHA256
6166611f9afc1eb9a3421d8d5200d7e5770fb012607be4879be4aa2b951fcf74
-
SHA512
f2063e1b5bb8ad81286e98ded7fbd03fc75e894e8985b83471538fbc5aa5f84624454c703544d38a82f353ad725694188fa6afb6a351de9ad78976bb76d8865c
-
SSDEEP
12288:JnOnht4BmmO7QGNec+9d7OZYnNbDLiV+bRGeQ1AmixJu5k9:JnOnP2mz7QGN/KOuNvjGz1A7u5k9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 075e429cd59099875b0afee01870f052_JaffaCakes118
Files
-
075e429cd59099875b0afee01870f052_JaffaCakes118.exe windows:4 windows x86 arch:x86
d251c2808607685f1cdc3cd8b13dcb33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileIntA
FormatMessageW
lstrcpynA
DeleteFileW
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
VirtualProtectEx
lstrcpynA
lstrcpynA
OpenMutexW
GetFileType
GetModuleHandleA
GetCommandLineW
lstrcatA
GetFileSize
lstrcmpA
lstrcpynA
ReadFile
ReadConsoleA
lstrcpynA
CreateDirectoryW
SetThreadPriority
VirtualFree
GetCurrentThreadId
lstrcpynA
lstrcpynA
GetDiskFreeSpaceW
certmgr
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 17KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ