Static task
static1
Behavioral task
behavioral1
Sample
16aa2ccece23e6ecd744a7e49be18950_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16aa2ccece23e6ecd744a7e49be18950_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16aa2ccece23e6ecd744a7e49be18950_JaffaCakes118
-
Size
75KB
-
MD5
16aa2ccece23e6ecd744a7e49be18950
-
SHA1
9fdf4161ae6770c547f7b49cb5bc51c7b02aa29b
-
SHA256
4db78202d84bd67df4bf28bb16a2165a1300af482d281d599cb91b5692afd3eb
-
SHA512
385db58404439bf8ed15748e82f757ffad1a583fd466e99973d83f91f54e9e82fd9708b34f07872338654dd8ecfb149a2caac229d8b89db70e6efec41e18195e
-
SSDEEP
1536:hG96By+r4NZq4s5hjfoNzdZK81fH9gc6gEtv4o1CU+D7COOyX7HI:hC6B1r4NNMhjgjMM/uFgE5j1CD2OOyXM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16aa2ccece23e6ecd744a7e49be18950_JaffaCakes118
Files
-
16aa2ccece23e6ecd744a7e49be18950_JaffaCakes118.exe windows:4 windows x86 arch:x86
a9441f1b84b6586f2d27dce0985b9f73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceA
GetStartupInfoW
GetFileSize
SetFileTime
SetFileAttributesW
InitializeCriticalSection
CloseHandle
SetFileTime
FormatMessageW
ReadFile
LeaveCriticalSection
IsBadWritePtr
lstrcatA
GetModuleHandleA
GetCurrentDirectoryW
SetFileTime
GetLastError
CreateMutexW
GetLocalTime
lstrcpyA
HeapCreate
msi
MsiCloseHandle
MsiAdvertiseProductA
MsiCreateRecord
MsiCloseAllHandles
user32
PeekMessageW
IsWindow
IsZoomed
GetWindowRect
DispatchMessageA
GetWindowTextA
SetCursorPos
PostMessageW
wsprintfW
GetWindowLongW
IsDialogMessageA
LoadCursorW
SetFocus
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE