Static task
static1
Behavioral task
behavioral1
Sample
449d82005787ccf98e38ba3026018be9_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
449d82005787ccf98e38ba3026018be9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
449d82005787ccf98e38ba3026018be9_JaffaCakes118
-
Size
23KB
-
MD5
449d82005787ccf98e38ba3026018be9
-
SHA1
abd9840cb87b6d0d2d6e7bd524f425c54f3f07d8
-
SHA256
62769f5cbe7ba3fbaaae759a9662a8151ba3b1d307533d0bd1151a3cb7bde601
-
SHA512
d63904d74bb564b9fe3500ec0766a9ec6ad2b2fc0a263cdacbc1b999e6204a430dffbe9ec5dc8023841a2c9894bbf20f74057d9845e32afe6be4be28a94ce582
-
SSDEEP
384:9n7UOyvPecp1sX6LUTxW8vbgPaD4xH40oE/+qATNGnLkq3xljXv:5ZUeAzoW8YF4e/+qKSl7v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 449d82005787ccf98e38ba3026018be9_JaffaCakes118
Files
-
449d82005787ccf98e38ba3026018be9_JaffaCakes118.exe windows:5 windows x86 arch:x86
c01b0c9ae3a7d37b678b183990c7adc9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetEnvironmentVariableA
GetStartupInfoA
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW
Sections
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 574B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ