Static task
static1
Behavioral task
behavioral1
Sample
140774e4ccc0abc1d6116394bb6ffd90_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
140774e4ccc0abc1d6116394bb6ffd90_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
140774e4ccc0abc1d6116394bb6ffd90_JaffaCakes118
-
Size
120KB
-
MD5
140774e4ccc0abc1d6116394bb6ffd90
-
SHA1
8d21ef0129078a60716d72e4bb6f822005ad202d
-
SHA256
133211f4466289bd609e5179b9ff2a1ba6e40afa2c37345255eab80a7dee5e69
-
SHA512
00313b6ac6311366a6890aa7e7fa8d1e13578880703b360026b1314884440e210f298e014b71b1e429fdc309bc9e0d5f97cbdabfbfbfe6697ce3c9e544345461
-
SSDEEP
1536:ZRaJLwYVtRmfwJQYhrLIsG3S6kpqlht9A5Bw9KkkfadYGsVi76ssKJNKiORY:ZXoJQYNLN6kArA5KkfadYGsM3scGY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 140774e4ccc0abc1d6116394bb6ffd90_JaffaCakes118
Files
-
140774e4ccc0abc1d6116394bb6ffd90_JaffaCakes118.exe windows:8 windows x86 arch:x86
2d7d1bd1ec54730012aaa933f7b8cb26
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
InterlockedIncrement
GetCurrentDirectoryA
WriteFileEx
ExitProcess
GetPrivateProfileSectionA
Heap32First
VirtualAllocEx
GetDiskFreeSpaceW
GetModuleHandleW
FindResourceW
lstrcpyW
GetStringTypeW
GetACP
lstrcmpA
GetLongPathNameA
WaitForSingleObject
LoadLibraryA
GetDiskFreeSpaceW
GetPrivateProfileIntA
GetPrivateProfileIntA
InterlockedDecrement
SetEnvironmentVariableA
apphelp
SdbCreateMsiTransformFile
AllowPermLayer
ApphelpCheckExe
ApphelpCheckIME
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE