Static task
static1
Behavioral task
behavioral1
Sample
387eef1abeea994bc5e6d551cf2c3290_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
387eef1abeea994bc5e6d551cf2c3290_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
387eef1abeea994bc5e6d551cf2c3290_JaffaCakes118
-
Size
242KB
-
MD5
387eef1abeea994bc5e6d551cf2c3290
-
SHA1
cfcaa993b6d4c7056aad55550a06a983278a5d13
-
SHA256
a73a84559c42ba48cfd7133d41ad7da1737247b4f7e82eb4d44c630d8cfe1f38
-
SHA512
0975e7ec19d2ececc6d8ef8c7ebfaff92ae03d909f0bf1594adf28682ad66e2437bab15861de1c4ef35b433965ef73444f0edba656d0f8dc289b33349ea99e94
-
SSDEEP
6144:Xu5vknQDrfoAHhRRVP4hTDPltCFEhyHJf:Xu5vknQg8RVkv2+YJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387eef1abeea994bc5e6d551cf2c3290_JaffaCakes118
Files
-
387eef1abeea994bc5e6d551cf2c3290_JaffaCakes118.exe windows:5 windows x86 arch:x86
b3e830a039827ba587c1be0c15cb1c9c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
DeleteAtom
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
FindClose
FindNextFileW
FindResourceW
FlushInstructionCache
GetCurrentProcess
GetCurrentProcessId
GetFileSize
GetFileTime
GetProcessHeap
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
CompareStringW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
SetCurrentDirectoryW
Sleep
VirtualProtect
VirtualQuery
WriteFile
AddAtomW
VirtualAlloc
GlobalAlloc
GetDriveTypeA
user32
LoadIconA
LoadCursorA
GetSystemMetrics
LoadIconW
gdi32
GetStockObject
advapi32
RegOpenKeyExA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text3 Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 935B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ