Static task
static1
Behavioral task
behavioral1
Sample
448816cedaa34cc11e6e351ecc2d0e84_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
448816cedaa34cc11e6e351ecc2d0e84_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
448816cedaa34cc11e6e351ecc2d0e84_JaffaCakes118
-
Size
328KB
-
MD5
448816cedaa34cc11e6e351ecc2d0e84
-
SHA1
88fc4764cc9514bf35c974510ce7c6eddde5319f
-
SHA256
b133a00efaaf1226f93995f683a68a3d3009c95bb5a3f0c91759ca5cc854c96e
-
SHA512
ef2949210ce3bf2a24920b7ddaa85d7c9ca46ee8479306c2c65a50674775575a0642325fdbe1024a50078147ccf1383a338d197367d756aa218ecf040978db7c
-
SSDEEP
6144:vOxVpBMDHXxy+CdFr/GJS0hGaMUXjyIU4Ozwp05M8:A7OD3wDjTGJZcatjQXzksM8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 448816cedaa34cc11e6e351ecc2d0e84_JaffaCakes118
Files
-
448816cedaa34cc11e6e351ecc2d0e84_JaffaCakes118.exe windows:4 windows x86 arch:x86
5f25140d80af6ece3027b25ab216b3aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
InterlockedExchange
HeapReAlloc
SearchPathA
HeapCreate
GetStdHandle
GetCommandLineA
GetAtomNameA
lstrlenA
SetConsoleCP
WaitForSingleObject
GetConsoleCP
GetTickCount
CompareFileTime
GetVersion
GetModuleHandleA
CloseHandle
SuspendThread
WaitForMultipleObjects
GetSystemDefaultLangID
GlobalUnlock
user32
CreateIcon
GetKeyState
MessageBoxA
IsDialogMessage
DispatchMessageA
SetPropA
DestroyMenu
FindWindowA
InvertRect
EnableScrollBar
CopyImage
DialogBoxParamA
SetWindowPos
GetKeyboardLayout
DrawCaption
SetScrollInfo
GetDlgItem
DispatchMessageA
DragObject
CreateCursor
GetCursorInfo
InsertMenuA
CreateMenu
advapi32
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
RegCreateKeyExA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ