Static task
static1
Behavioral task
behavioral1
Sample
43a51af1953759fa5894df0656c64fdc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
43a51af1953759fa5894df0656c64fdc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
43a51af1953759fa5894df0656c64fdc_JaffaCakes118
-
Size
324KB
-
MD5
43a51af1953759fa5894df0656c64fdc
-
SHA1
695c8655e8b76b47d2059bfab7b5df5962b13be9
-
SHA256
8325bae4bb7683f381078d08b024b285adba13714a105fe7996a73ec46ae13da
-
SHA512
39f1145fd1bbd7cf9aeea4a05f3a7b0598484e294302192d4d1d23aeed7c342dfe3bc76b8cb54e0e3bb4c53434497bb9603ed58f5afa6207da48ef7d154fe0c5
-
SSDEEP
6144:fpN4uKB+k8e8WSrXIm+oI7N0TghrerX3tin:RcXj8WaXIZVN0qqrX9in
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43a51af1953759fa5894df0656c64fdc_JaffaCakes118
Files
-
43a51af1953759fa5894df0656c64fdc_JaffaCakes118.exe windows:5 windows x86 arch:x86
639041ce7a7cc76cc83bc691b620cd5f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
GetLastError
SetEvent
GetLocalTime
GetFileTime
SetThreadPriority
ExitProcess
WaitForSingleObject
DuplicateHandle
CreateSemaphoreW
SystemTimeToFileTime
VirtualAllocEx
GetProcAddress
GetSystemTime
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetModuleHandleW
FindClose
RtlUnwind
HeapFree
VirtualFree
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
user32
LoadIconW
LoadStringW
TranslateMessage
RegisterClassExW
MessageBoxA
GetDesktopWindow
SendMessageW
MessageBoxW
ShowWindow
UpdateWindow
GetMessageW
DispatchMessageW
gdi32
PatBlt
ole32
CoCreateInstance
CoInitialize
CoUninitialize
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ