Static task
static1
Behavioral task
behavioral1
Sample
540f1783e3dd8d92850b7ea9a98e2db3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
540f1783e3dd8d92850b7ea9a98e2db3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
540f1783e3dd8d92850b7ea9a98e2db3_JaffaCakes118
-
Size
1.3MB
-
MD5
540f1783e3dd8d92850b7ea9a98e2db3
-
SHA1
f507446c47da37fa6d4916724e7ea1ae2c5ad3d4
-
SHA256
e44bf38dc921c66e329886cf1ea7ebafb1cfe3c892f0a6b52d80a81c892a9f24
-
SHA512
b450d9e0799aae1316a24818a98ab7b5d5df1b3f1b24eb80086af4d4acdec3e0609ac321893c6244d0edeadb10f47771400158fa65a37b70673793e3231ef304
-
SSDEEP
24576:XpG+r30erwjjvyEQw/vAflE6f7rEJD5h6cNcnrR6qwwcbFcl:5v0nfQE6f3Ed5pcndlwDbF8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 540f1783e3dd8d92850b7ea9a98e2db3_JaffaCakes118
Files
-
540f1783e3dd8d92850b7ea9a98e2db3_JaffaCakes118.exe windows:4 windows x86 arch:x86
a8a4e90529df54ee2a31cc6a024e03b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
CreateWindowExA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
lstrcpyA
Sleep
oleaut32
SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex
advapi32
RegQueryValueExA
RegSetValueExA
gdi32
UnrealizeObject
version
VerQueryValueA
mpr
WNetGetConnectionA
ole32
CreateStreamOnHGlobal
IsEqualGUID
comctl32
_TrackMouseEvent
urlmon
CoInternetCreateZoneManager
wininet
InternetSetOptionA
shell32
ShellExecuteA
SHGetSpecialFolderLocation
netapi32
Netbios
shlwapi
SHAutoComplete
Sections
.text Size: 23KB - Virtual size: 12.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE