Static task
static1
Behavioral task
behavioral1
Sample
545a6bb76593da68aad09b6cf0fd30f5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
545a6bb76593da68aad09b6cf0fd30f5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
545a6bb76593da68aad09b6cf0fd30f5_JaffaCakes118
-
Size
661KB
-
MD5
545a6bb76593da68aad09b6cf0fd30f5
-
SHA1
27fd0f8e358e2014d21b5a791eeeb513220c5315
-
SHA256
a92db966a2b15682c8068429685a1b40a06794aaeac246390224040ef3ddf03e
-
SHA512
ea15ea7b27c94b54a2e9cd757945a9b0a167740fd118e9a2c37d8e95507ce5bf67f2359b9717a242442b2424b8f2380d174794b38ad70b1ac3b51d812a7e9315
-
SSDEEP
12288:XhCaaPbeiX1WxD/Mu0nglZikuLNe4U0K1cNOZjm46/qv0Dlz+FEobusklaWIhtZ:Xh3aaiXUxoZngikuLk4U0K1dZ64vMlzk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 545a6bb76593da68aad09b6cf0fd30f5_JaffaCakes118
Files
-
545a6bb76593da68aad09b6cf0fd30f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
9165ea3e914e03bda3346f13edbd6ccd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW
user32
MessageBoxA
wsprintfA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ