Static task
static1
Behavioral task
behavioral1
Sample
12881499c1ba91e3642c2377ef87cfd0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12881499c1ba91e3642c2377ef87cfd0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12881499c1ba91e3642c2377ef87cfd0_JaffaCakes118
-
Size
183KB
-
MD5
12881499c1ba91e3642c2377ef87cfd0
-
SHA1
d8d09c522fbfd5f22d269ad20cc340c1577c0fbf
-
SHA256
aef857ea17b66b800caa3ed326c72346bd7afd49762640e738461e7055caa24a
-
SHA512
c9a257268da47670840d84b2a89bcb958322f5961d5a25138734a5065b336ac1297f009998219dfcfe23918b7b427b0ba81949391e871b4e55c1a9a9e939f778
-
SSDEEP
3072:gtcHQ8+8iHpPQ5w3gYKgwM7xf4gZTw/I8kjnIpxY:gWLdep4bYKgnxf4gS/Y2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12881499c1ba91e3642c2377ef87cfd0_JaffaCakes118
Files
-
12881499c1ba91e3642c2377ef87cfd0_JaffaCakes118.exe windows:4 windows x86 arch:x86
d46b5fba2ac945dbf6f431340e09629d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
CloseHandle
ExitThread
GetStartupInfoA
GetLogicalDrives
GetModuleHandleA
GetCommandLineA
LoadLibraryA
GetProcessTimes
GetModuleFileNameA
FreeLibrary
TlsAlloc
GetDriveTypeA
Sleep
GetCurrentThread
IsValidCodePage
GetThreadPriority
GetCurrentThreadId
VirtualAlloc
IsDebuggerPresent
GetCurrentProcessId
user32
IsWindowVisible
GetSystemMetrics
OpenIcon
GetFocus
GetWindowDC
GetDC
CreateWindowExA
GetForegroundWindow
BeginPaint
RegisterClassA
UpdateWindow
ShowWindow
GetWindow
GetActiveWindow
ReleaseDC
GetWindowTextLengthA
GetWindowTextA
GetClassLongA
GetWindowLongA
advapi32
RegOpenKeyExA
RegCreateKeyExA
IsTextUnicode
RegCloseKey
GetUserNameA
RegQueryValueExA
version
VerLanguageNameA
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE