Static task
static1
Behavioral task
behavioral1
Sample
45e5ef539a94b5ad84eea584e1a1ecce_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45e5ef539a94b5ad84eea584e1a1ecce_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
45e5ef539a94b5ad84eea584e1a1ecce_JaffaCakes118
-
Size
164KB
-
MD5
45e5ef539a94b5ad84eea584e1a1ecce
-
SHA1
37fb04684067f14099c5ed9ff55f113dac37e68f
-
SHA256
ed12718dd0ecb66f8427190fd3e65fe0f759d3e4244df5c1a2bc2b9ee9b62f2c
-
SHA512
02f22aeffaf32d1705b3311a7200bef33ee67072935b34187211eeffa07e18383ccb8073a0312081821da3985512efe977030dd1b39974debb3e35fafdf60206
-
SSDEEP
3072:D2LTl8nZVfMTFrP8zUC2PgsDjtvW5QhNuNIH7wYRk3SyJOE:D2LTl8nZor4sVvWquDYJyB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45e5ef539a94b5ad84eea584e1a1ecce_JaffaCakes118
Files
-
45e5ef539a94b5ad84eea584e1a1ecce_JaffaCakes118.exe windows:4 windows x86 arch:x86
786ae580aa7fc3fadfceb7b4a1bf10a5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
_ultoa
_itoa
memset
memcpy
msvcrt
srand
rand
strtok
kernel32
CreateProcessA
TerminateProcess
lstrcmpiA
GetProcAddress
lstrlenA
VirtualAlloc
ExitProcess
OpenProcess
GetSystemDirectoryA
FindNextFileA
lstrcatA
FindClose
Sleep
LoadLibraryA
CreateToolhelp32Snapshot
Process32Next
FreeLibrary
CreateFileA
CreateEventA
FindFirstFileA
GetVersionExA
CloseHandle
GetWindowsDirectoryA
GetSystemTime
Process32First
GetCurrentProcessId
HeapAlloc
WaitNamedPipeA
HeapFree
SetNamedPipeHandleState
HeapCreate
TransactNamedPipe
GetLastError
HeapSetInformation
GetVolumeInformationA
lstrcpyA
WriteFile
GetTickCount
ProcessIdToSessionId
user32
GetForegroundWindow
wsprintfA
advapi32
RegQueryValueExA
RegOpenKeyA
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ