Static task
static1
Behavioral task
behavioral1
Sample
116dfbbfa998ce881dea27a1f8f3d4a0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
116dfbbfa998ce881dea27a1f8f3d4a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
116dfbbfa998ce881dea27a1f8f3d4a0_JaffaCakes118
-
Size
396KB
-
MD5
116dfbbfa998ce881dea27a1f8f3d4a0
-
SHA1
253d8b1ea94602e24766c0b8ecf9602a2278333e
-
SHA256
70d994c766233e71bb41a32f9575dbf92239feb4af67202d301622b8f6c072f4
-
SHA512
818fccf63c40fb5a2e3a139135ac4503ca1a87b2cc74fdd48af0b9965d458d2e36874f35aaebae41c73efcf764c805aac614fcc2b3e3f68768d2d0b37863adef
-
SSDEEP
12288:6kAeGxhD5NOZ2i269yeJ6CCDFDT7YwmD5geVD:6kKlgZ2Nm6CYf7YwmD5gu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 116dfbbfa998ce881dea27a1f8f3d4a0_JaffaCakes118
Files
-
116dfbbfa998ce881dea27a1f8f3d4a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e46bd0503739f7d4a187e9b588c8c83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
ReadConsoleA
GetFileSize
GetCurrentDirectoryW
ReadFile
InitializeCriticalSection
SetFileAttributesA
ReadConsoleA
GetStartupInfoW
lstrcatA
CreateMutexA
HeapCreate
GetModuleHandleA
lstrcpyA
IsBadStringPtrW
LeaveCriticalSection
GetLocalTime
FindResourceA
GetLastError
ReadConsoleA
FormatMessageA
msi
MsiAdvertiseProductA
MsiCloseHandle
MsiCloseAllHandles
MsiCreateRecord
user32
PeekMessageW
PostMessageW
SetCursorPos
wsprintfW
DispatchMessageA
IsWindow
IsCharLowerA
LoadCursorW
IsZoomed
SetFocus
GetWindowLongW
IsDialogMessageA
GetWindowTextA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE