Static task
static1
Behavioral task
behavioral1
Sample
1278ad9d9c4944a4f682cb5cb886db8c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1278ad9d9c4944a4f682cb5cb886db8c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1278ad9d9c4944a4f682cb5cb886db8c_JaffaCakes118
-
Size
944KB
-
MD5
1278ad9d9c4944a4f682cb5cb886db8c
-
SHA1
77237215995e49826146cc926c24e39413fe9811
-
SHA256
e86d187eda60bbd7ff728106ec9959dc79557ce09d393146e8af6acdb0051d11
-
SHA512
ca64c03e1dfa07e4f345c76315fc636799339fde69ccf959fffc6559fae8d0dda5812270151482d0c24dd56d054fa2c7f394f88b002e47b5f4a5e4654c9c15e9
-
SSDEEP
24576:Iadjy9aM2f3BpzlZkSWy4dzMJQgT4354JVKWqwj:Djy0XxGSB4dzPnCJVKWqwj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1278ad9d9c4944a4f682cb5cb886db8c_JaffaCakes118
Files
-
1278ad9d9c4944a4f682cb5cb886db8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ed9639567994fa20d4c8c1ee08e8b27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
LoadLibraryA
LCMapStringA
ExitProcess
CreateFileA
user32
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA
CloseWindow
advapi32
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegEnumValueA
Sections
.text Size: 919KB - Virtual size: 920KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 812KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ