Static task
static1
Behavioral task
behavioral1
Sample
46789a1efe2d0f91cf78ae8bd810ecd4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46789a1efe2d0f91cf78ae8bd810ecd4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
46789a1efe2d0f91cf78ae8bd810ecd4_JaffaCakes118
-
Size
13KB
-
MD5
46789a1efe2d0f91cf78ae8bd810ecd4
-
SHA1
fcabf90708377de8db81cd798cd13c86c900b6b4
-
SHA256
0ec515a63aa8d8ad6f75e6b597cf50f0acb52c58d408af0e85f123c27241c2b4
-
SHA512
91412a47dd015f53642eb58a46c2d22305efb48663148d380551d66537bca850b55c6ceb18eabc82b2a47da4989fc1872107271ca43bd5f44c5037036890ee67
-
SSDEEP
384:H0wW2OrRZtRZrtHnUd1z//VfoR6FLroR:H0j2OrRZtFnUjz//VgR6FLro
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46789a1efe2d0f91cf78ae8bd810ecd4_JaffaCakes118
Files
-
46789a1efe2d0f91cf78ae8bd810ecd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
e7cb21f1d86ac14900a42396295f6526
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
GetCommandLineA
CreateThread
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
VirtualProtectEx
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
TerminateProcess
GlobalLock
GlobalAlloc
WriteProcessMemory
VirtualAllocEx
GetProcAddress
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceA
GetStartupInfoA
GetModuleHandleA
WaitForSingleObject
DeleteFileA
Sleep
CopyFileA
GetCurrentProcessId
CreateRemoteThread
WinExec
user32
FindWindowExA
FindWindowA
SendMessageA
advapi32
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegCloseKey
winmm
mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
msvcrt
_exit
_controlfp
_except_handler3
__set_app_type
sprintf
strncpy
sscanf
strchr
strrchr
memcpy
strcpy
memset
strlen
fclose
fwrite
fopen
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ