Static task
static1
Behavioral task
behavioral1
Sample
16a9d8147b9ce42c0366bef6fee39f89_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16a9d8147b9ce42c0366bef6fee39f89_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16a9d8147b9ce42c0366bef6fee39f89_JaffaCakes118
-
Size
336KB
-
MD5
16a9d8147b9ce42c0366bef6fee39f89
-
SHA1
145fe8477f0620a5741b63cd781bc21419b182a4
-
SHA256
a38a1d60cb14f745b1a8ad70ae85e4b49da175fc32bbb42475da7714a6eb2c5f
-
SHA512
5b7e1af1a1e59e0477c931122e4d7dd0f0ab16118c49f6bd9e8fa3ce361a5b4efe91c6dd95f520a4ab1082a8e7f1114f45796801291b7027373abf6235ae60ab
-
SSDEEP
6144:uFKEtXyyDFSMzZJUYoUF7X2k1L9OHjJPstdPSJaGekngpR7Wu5htbPFfQVkATas:uLXyyDxzHUYv7J9eFstw8GBgbaYbtfQN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16a9d8147b9ce42c0366bef6fee39f89_JaffaCakes118
Files
-
16a9d8147b9ce42c0366bef6fee39f89_JaffaCakes118.exe windows:4 windows x86 arch:x86
e877ded4c330a90485daa21abee1e4ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
CloseHandle
GetComputerNameA
LoadLibraryA
SetEvent
GetSystemTime
CreateFileA
GetCommandLineA
SetLastError
FindAtomA
ReleaseMutex
lstrcatA
CreateThread
GetDiskFreeSpaceW
GetTickCount
GetDriveTypeW
GetFileAttributesA
HeapCreate
LocalFree
LoadLibraryW
user32
FillRect
CloseWindow
DestroyCaret
GetClipCursor
DrawStateA
GetDlgItem
GetKeyState
GetClassInfoA
GetComboBoxInfo
CallWindowProcA
SetFocus
CreateWindowExA
DispatchMessageA
cryptnet
CryptGetObjectUrl
LdapProvOpenStore
CertDllVerifyCTLUsage
CryptCancelAsyncRetrieval
CryptGetTimeValidObject
desk.cpl
DisplaySaveSettings
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 324KB - Virtual size: 323KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ