Static task
static1
Behavioral task
behavioral1
Sample
41e85ceb0d4ad2551c657cbd59f9679f_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
41e85ceb0d4ad2551c657cbd59f9679f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41e85ceb0d4ad2551c657cbd59f9679f_JaffaCakes118
-
Size
119KB
-
MD5
41e85ceb0d4ad2551c657cbd59f9679f
-
SHA1
1f9be8a4ee9e64c833f1ace9d46ff7294a7256a4
-
SHA256
ba661d8e05c9679859995b4362b87ac120c4a76f6729d29c474213f5da85b9ea
-
SHA512
d51a4f81f093b7020cb599d64d9cb9583691f363522790d4210ab22cb28f9719b5d5ef5ba25bd60ae367271e56222fc3b4d78ca2fe3e426eaaa5441257ff2656
-
SSDEEP
1536:n5umO+YB4Z9LQcO2k/HUovzTwz9M8hLgQ2R4b3GYHiEApiNti8z8PP2z5IHErHlW:nED+ZFQDJ1arg/RqG3SyP2FImto9d05
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e85ceb0d4ad2551c657cbd59f9679f_JaffaCakes118
Files
-
41e85ceb0d4ad2551c657cbd59f9679f_JaffaCakes118.exe windows:5 windows x86 arch:x86
91a209e84eb05f8ce329798ac4c9822f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
wvnsprintfA
StrRChrA
imagehlp
CheckSumMappedFile
kernel32
GetFileAttributesA
GetProcAddress
GetModuleHandleA
GlobalAlloc
LoadLibraryExA
GlobalFree
FreeLibrary
CreateFileA
GetProcessHeap
HeapAlloc
DeviceIoControl
HeapFree
CloseHandle
lstrcpyA
CreatePipe
CreateProcessA
WaitForSingleObject
DeleteFileA
MoveFileExA
WideCharToMultiByte
GetVersionExA
CreateDirectoryA
CopyFileA
MoveFileA
Sleep
lstrcatA
GetFileTime
SetFileTime
WriteFile
lstrlenA
GetFileSize
SetFilePointer
lstrcmpiA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTempPathA
GetTempFileNameA
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyA
shell32
SHGetSpecialFolderPathA
CommandLineToArgvW
ole32
CoCreateGuid
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kcode Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dcode Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xcode Size: 1024B - Virtual size: 569B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE