Static task
static1
Behavioral task
behavioral1
Sample
16ab3f4798b5c12fd0ccca281d04ab36_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
16ab3f4798b5c12fd0ccca281d04ab36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16ab3f4798b5c12fd0ccca281d04ab36_JaffaCakes118
-
Size
34KB
-
MD5
16ab3f4798b5c12fd0ccca281d04ab36
-
SHA1
8ed5d1bb2b66e7acec90c035af993ac2d747569f
-
SHA256
cea78c7706ec0a33b3df332a4ba6ee7e68ab6e33ecda4fdd1c21bba0b35b6db8
-
SHA512
55177cdde42999902d430194a6fc0f787983f2eb1e7041bd32de17492a10fee369592cafb1fe8632caa3e2925879ba758741c72a58a14c8cfa4784525386785a
-
SSDEEP
768:BbcOEJBMhj7fE8avPjq/a09bMDN8+9/2:UMt7qnjq/aQQDr9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ab3f4798b5c12fd0ccca281d04ab36_JaffaCakes118
Files
-
16ab3f4798b5c12fd0ccca281d04ab36_JaffaCakes118.exe windows:4 windows x86 arch:x86
a6e6ebbfe9bbc91e81c930a1d0bbc31b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
GetCurrentThread
GetCommandLineA
ExitThread
Sleep
GetLastError
GetCurrentThreadId
VirtualAlloc
GetFileType
ExitProcess
SwitchToThread
FreeLibrary
GetModuleHandleA
GetCurrentProcessId
GetModuleFileNameA
GetThreadPriority
GetCurrentProcess
LoadLibraryA
GetProcessTimes
GetStartupInfoA
CloseHandle
user32
ShowWindow
GetWindow
IsWindowVisible
GetWindowLongA
GetWindowTextA
GetSystemMetrics
GetFocus
OpenIcon
GetWindowDC
BeginPaint
UpdateWindow
GetForegroundWindow
GetActiveWindow
GetClassLongA
GetWindowTextLengthA
RegisterClassA
CreateWindowExA
GetDC
ReleaseDC
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
GetUserNameA
IsTextUnicode
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerLanguageNameA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ