Static task
static1
Behavioral task
behavioral1
Sample
426dfe62f9f04ae96e8a7c016bf04fda_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
426dfe62f9f04ae96e8a7c016bf04fda_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
426dfe62f9f04ae96e8a7c016bf04fda_JaffaCakes118
-
Size
173KB
-
MD5
426dfe62f9f04ae96e8a7c016bf04fda
-
SHA1
2d2d23620ed4e8a167439ee3136fd0b80166d896
-
SHA256
af9b8a67e022e33123a2e66cc21c24eb58e06525a5c03ddaff88c4dc90a296a8
-
SHA512
849b4d46cf176eceeb82f5235fea52b1aa5b37945372a9d7477b2da030d1c1e66d8f93b3997759ef68aa4a9d977d59ee9b5eec5b641f9947f3256b23755576d9
-
SSDEEP
3072:Abteb9CgkcNJrH9e7Gbq4WapVuim8WZu73ZIFW1P5LCI1fig/jXUo22Q7KTrvP:AEb9jkcNJz9e7ic0QcPjp7fv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426dfe62f9f04ae96e8a7c016bf04fda_JaffaCakes118
Files
-
426dfe62f9f04ae96e8a7c016bf04fda_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8121763c2f33c8db8b0125ef2a644f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalAppExitA
HeapCreate
GetEnvironmentVariableA
GetOEMCP
GlobalAddAtomW
HeapReAlloc
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetConsoleCtrlHandler
GetModuleFileNameA
WriteFile
FreeEnvironmentStringsW
VirtualFree
SetHandleCount
IsBadWritePtr
EnumResourceNamesA
IsBadCodePtr
SetUnhandledExceptionFilter
GetFileType
WideCharToMultiByte
HeapDestroy
VirtualAlloc
GetDateFormatW
GetEnvironmentStrings
UnhandledExceptionFilter
SetFilePointer
GetCPInfo
IsBadReadPtr
GetCurrentThread
user32
KillTimer
GetWindowTextA
SetTimer
LoadStringA
CharNextA
IsWindowVisible
EnumWindows
GetMessageA
PostThreadMessageA
wsprintfW
DispatchMessageA
PeekMessageA
MessageBoxA
CharUpperA
GetWindowThreadProcessId
wsprintfA
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 90KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ