Static task
static1
Behavioral task
behavioral1
Sample
54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118
-
Size
428KB
-
MD5
54e5fed9b9d8cd10e9aede99c1c60fa0
-
SHA1
1515b4eb1925e94f5b42aa40b5d5377cd3d956ec
-
SHA256
69f2bd1188df51cf1e6b4dccb5929e6677925ed65f76950e6cd316f1e7df0450
-
SHA512
d7a3a546ea4ea96224f089901606628a3f19198f32ed60bd7e8b9561e6d6234c0645079021e556720a10614b223a03de59873de9d265b0f542a7662b16347565
-
SSDEEP
12288:fjNnb4YX5vAyGaX8SYnTKicsGQ7ab6tD:hbjpXStcw7a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118
Files
-
54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118.exe windows:4 windows x86 arch:x86
3d5c0ae215804efa8dcfe6508226bcaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
GetCurrentProcessId
VirtualAlloc
InterlockedIncrement
GetCurrentThreadId
ExitProcess
CreateFileA
GetFileType
TlsGetValue
FindClose
CreateEventA
CreateProcessW
FindResourceW
HeapCreate
InitializeCriticalSection
WideCharToMultiByte
CreateProcessA
TerminateProcess
FormatMessageW
SetFileAttributesA
GetStringTypeW
HeapReAlloc
FindNextFileA
GetSystemTimeAsFileTime
ReadFile
GetStartupInfoA
SetUnhandledExceptionFilter
InterlockedExchange
FindFirstFileA
GetModuleHandleA
TlsFree
GetCPInfo
GetProcessHeap
GetFileAttributesW
FreeEnvironmentStringsW
MultiByteToWideChar
GetWindowsDirectoryA
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
LoadLibraryA
GetModuleFileNameA
FlushFileBuffers
GetEnvironmentStringsW
HeapAlloc
IsDebuggerPresent
FindFirstFileW
FreeLibrary
GetConsoleCP
lstrlenA
SetHandleCount
EnterCriticalSection
LoadLibraryExW
HeapFree
GetLastError
GetCurrentThread
GetVersion
GetTickCount
GetCommandLineA
GetProcAddress
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetStdHandle
DeleteCriticalSection
TlsSetValue
TlsAlloc
SetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
VirtualFree
RtlUnwind
WriteFile
InterlockedDecrement
FatalAppExitA
GetACP
GetOEMCP
IsBadWritePtr
SetConsoleCtrlHandler
GetStringTypeA
Sleep
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
user32
EnableWindow
EnableMenuItem
BeginPaint
SetWindowLongA
PeekMessageA
SetWindowPos
ShowWindow
TranslateMessage
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 352KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE