Static task
static1
Behavioral task
behavioral1
Sample
43bb8f3642fb2fade7dce13429f60c30_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
43bb8f3642fb2fade7dce13429f60c30_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
43bb8f3642fb2fade7dce13429f60c30_JaffaCakes118
-
Size
192KB
-
MD5
43bb8f3642fb2fade7dce13429f60c30
-
SHA1
392c9717b578681f148d779ecb601d9a2b1c6d26
-
SHA256
06ded50a10676f8a74de552b190d7bb0e14109cb313808c8ceedccb687bd665f
-
SHA512
96ab007c6242ac135ec86555c90fcddad4d8bddee6a86ab8959234492ede97b51ab49c6e1c5a3fb344d186664ab3c3e34b3896fbd8d56a958e1e56b2c788a1ae
-
SSDEEP
3072:xDJGwguMezIUDzFwU1ODsleUloh7Qm0JcMGYxpaps4Lz4RfaIAoELCkqpcmSSfL8:Gw9CGohs0MfIpbHL0BZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43bb8f3642fb2fade7dce13429f60c30_JaffaCakes118
Files
-
43bb8f3642fb2fade7dce13429f60c30_JaffaCakes118.exe windows:4 windows x86 arch:x86
2ba03f44ede0ae17897d1593a5f5b201
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
CreateThread
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount
IsBadStringPtrA
LoadLibraryA
QueryPerformanceCounter
ReadFile
ResumeThread
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQueryEx
WaitForSingleObject
WideCharToMultiByte
lstrcmpiA
lstrcpyA
lstrcpynA
msvcrt
fopen
fseek
strcmp
wscanf
strstr
strncmp
atoi
user32
EndDeferWindowPos
CheckRadioButton
comctl32
ShowHideMenuCtl
InitCommonControls
oleaut32
VariantTimeToSystemTime
VarTokenizeFormatString
VarR4FromDec
VarDecInt
VarDateFromI4
VarCyFromUI2
VarCyFix
VarCyCmpR8
SysAllocStringByteLen
SafeArrayDestroyData
SafeArrayCreateVectorEx
LPSAFEARRAY_UserMarshal
Sections
.text Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ