Static task
static1
Behavioral task
behavioral1
Sample
51ff1952e566616ce4caeb26a100375d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
51ff1952e566616ce4caeb26a100375d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
51ff1952e566616ce4caeb26a100375d_JaffaCakes118
-
Size
68KB
-
MD5
51ff1952e566616ce4caeb26a100375d
-
SHA1
fc8feef2dea1e496e75371bd9c919867b4f1a155
-
SHA256
b1f2e258ff13d4886a063ce1e6fbb22bea89c9e31375120e7f200d7e8e0f1338
-
SHA512
4c1e964b5038c3af248e95e542b6214551a665295659e3130dc343e0cee7ee1f4a254e91f2e673bf1b302f20421647ce0695c40ef5f5c9bb65ad8da96170ed02
-
SSDEEP
1536:afpvz/nxHXV8sV55Qx2bLpNhqk6Ii1ZfoK5/f4m/b:QfAsL5Qx2b1Nsk6JZfoK5ou
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51ff1952e566616ce4caeb26a100375d_JaffaCakes118
Files
-
51ff1952e566616ce4caeb26a100375d_JaffaCakes118.exe windows:4 windows x86 arch:x86
38434319ca2db33ab79306ca711a50a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetModuleFileNameA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
LCMapStringW
LCMapStringA
GetStringTypeW
ResumeThread
GetLastError
CreateThread
TlsSetValue
ExitThread
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
RtlUnwind
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
DebugBreak
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
user32
GetDlgItem
DialogBoxParamA
SetTimer
SendMessageA
MessageBoxA
LoadIconA
SetWindowTextA
EndDialog
KillTimer
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
shlwapi
PathFileExistsA
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE