Static task
static1
Behavioral task
behavioral1
Sample
4528fab521ce96f98f15cccb1192d9f4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4528fab521ce96f98f15cccb1192d9f4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4528fab521ce96f98f15cccb1192d9f4_JaffaCakes118
-
Size
17KB
-
MD5
4528fab521ce96f98f15cccb1192d9f4
-
SHA1
f3d6be4b22e08f1887c16e807e487bc041694845
-
SHA256
cf10a768c902d020e43dec3df8eebe969a5a243e3027cb6cf7085a52df1471e8
-
SHA512
7e5cc0bf68e9aa45b51ebf7aa3c30b51ead9b910ff576bc54dccb4ac57a02474244dcf85f94120ca10b6e30d670d87ea9fedce571cc22ff81d705f492d3a4716
-
SSDEEP
384:RzVTyzTA01xGw4WGef9meHe9WFTNvtQxV:xVGPl1xGw4WGg9THeIFT3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4528fab521ce96f98f15cccb1192d9f4_JaffaCakes118
Files
-
4528fab521ce96f98f15cccb1192d9f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
581b33db055f06aaa0c291dacb0a516f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcmpiA
GlobalAlloc
ReadFile
PeekNamedPipe
Sleep
CreateProcessA
GetStartupInfoA
CreateFileA
GetModuleFileNameA
GetCommandLineA
GetLastError
CreateMutexA
CreateDirectoryA
GetCurrentThreadId
GetModuleHandleA
WriteFile
CloseHandle
DeleteFileA
LoadLibraryA
CreatePipe
GetProcAddress
user32
GetInputState
PostThreadMessageA
GetMessageA
LoadCursorA
CopyIcon
SetSystemCursor
MessageBoxA
advapi32
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_except_handler3
_controlfp
__set_app_type
__getmainargs
_acmdln
strlen
strcpy
sprintf
memset
printf
strcat
memcpy
strstr
getchar
exit
fclose
fopen
strncpy
fread
fseek
__CxxFrameHandler
fscanf
remove
_exit
_XcptFilter
_strlwr
iphlpapi
GetAdaptersInfo
ws2_32
inet_addr
wininet
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA
Sections
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ