Static task
static1
Behavioral task
behavioral1
Sample
16f88746a8cb6fc3fc72b04c4b8046e0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
16f88746a8cb6fc3fc72b04c4b8046e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16f88746a8cb6fc3fc72b04c4b8046e0_JaffaCakes118
-
Size
16KB
-
MD5
16f88746a8cb6fc3fc72b04c4b8046e0
-
SHA1
168c9185aadeadc4cd031e0971372efc172ba3b4
-
SHA256
c7355d3bde128d560b5acde03861b2873de27842fbdb5b6caef1f65c6185c366
-
SHA512
9bb3e5a73a31e0c22be4d02c97b136c195c9698fd0548bc3429453bb9c7e613e50232fe92a2c35bafb4c95b319643ac9cf3e8aca2904f203fd788aca2cb9df72
-
SSDEEP
384:g4zyG4OnpSMElvqBrFrefi7aSV5Fbtnv:tyGTnsjqVFiK7bJv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16f88746a8cb6fc3fc72b04c4b8046e0_JaffaCakes118
Files
-
16f88746a8cb6fc3fc72b04c4b8046e0_JaffaCakes118.exe windows:5 windows x86 arch:x86
017384bb512d269df622d3a872c6f964
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadConsoleA
PulseEvent
GetStringTypeW
GetLastError
GetDriveTypeA
SearchPathA
DeleteFileW
TlsGetValue
ReadConsoleA
ReadConsoleA
GetPrivateProfileSectionA
ReleaseMutex
FindAtomW
CloseHandle
GetLogicalDrives
HeapSize
VirtualProtectEx
Sleep
lstrlenA
GetStartupInfoA
LoadLibraryW
uxtheme
DrawThemeEdge
IsThemeActive
GetThemeColor
GetThemeSysSize
GetThemeTextExtent
SetWindowTheme
CloseThemeData
GetWindowTheme
GetThemeBool
DrawThemeBackground
CloseThemeData
GetThemeTextMetrics
OpenThemeData
gpedit
DllCanUnloadNow
ExportRSoPData
BrowseForGPO
DllGetClassObject
Sections
.text Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 73B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE