Static task
static1
Behavioral task
behavioral1
Sample
254af2869f368a1509aa95eea26a9792_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
254af2869f368a1509aa95eea26a9792_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
254af2869f368a1509aa95eea26a9792_JaffaCakes118
-
Size
316KB
-
MD5
254af2869f368a1509aa95eea26a9792
-
SHA1
44f9cbf81032220c5b702746b8ef97ba6c66d7dd
-
SHA256
c0eb2d12a688d1e98e79fe61f8319f02c5bded5c5de4c23b727dc6329b9db84c
-
SHA512
9eb12d9484cb00e184a599a6c80a1a8c7b0ec6616b7d4a04c4e1d186e1be303bdbf20f4ba7cc7b02520b4e8914a469d1f4ac64cc7e1563690b6d71d40994178d
-
SSDEEP
6144:0mirOg9yX2JaOVT8yXGa9DDMrWVtjPlQdEBqL05j7lFkx:WKD6VsqnVfQdEA24
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 254af2869f368a1509aa95eea26a9792_JaffaCakes118
Files
-
254af2869f368a1509aa95eea26a9792_JaffaCakes118.exe windows:4 windows x86 arch:x86
b42afd43c4a468e86e4138d436042a06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcmp
strcmp
memmove
wcsncmp
strlen
wcscspn
asin
shell32
SHGetSpecialFolderLocation
SHFileOperationA
Shell_NotifyIconA
DragQueryFileA
version
VerQueryValueA
VerInstallFileA
GetFileVersionInfoSizeA
kernel32
SetFilePointer
GetCommandLineA
SetErrorMode
LocalAlloc
lstrlenA
SetEvent
SetHandleCount
GetModuleHandleW
ExitProcess
SetEndOfFile
LoadLibraryA
GetLastError
GetOEMCP
LoadLibraryExA
GetProcAddress
GetModuleHandleA
IsBadReadPtr
ResetEvent
VirtualAllocEx
GetACP
ReadFile
gdi32
SetBkMode
SetTextColor
SaveDC
LineTo
CreateCompatibleBitmap
CreateDIBitmap
GetPaletteEntries
GetClipBox
CreateDIBSection
GetDIBColorTable
advapi32
RegOpenKeyA
RegDeleteValueA
ole32
CoRevokeClassObject
comdlg32
FindTextA
Sections
CODE Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 236KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ