Static task
static1
Behavioral task
behavioral1
Sample
554733160e10f09c42bb17dab683c173_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
554733160e10f09c42bb17dab683c173_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
554733160e10f09c42bb17dab683c173_JaffaCakes118
-
Size
18KB
-
MD5
554733160e10f09c42bb17dab683c173
-
SHA1
517af718ab9392926997b01a8f8592b6395a3c99
-
SHA256
b8f6349aa7320cad14649e38327562da43bb1112f78233560bd5e82de92223b3
-
SHA512
bab0a5e389e2b00f4d19ef62d82dabf4c14deb71aef8c34b1ffcb8ea3b415801e5106265ac560be8193ca95ab94707e0dbca4f552ce1577f0b33dd36af9cbb92
-
SSDEEP
192:Y2XigxK3i8W7UEMJF/dwR3rIYMFK07lVJTa0qtHWx:viAZ8W7UNFw1clVla0zx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 554733160e10f09c42bb17dab683c173_JaffaCakes118
Files
-
554733160e10f09c42bb17dab683c173_JaffaCakes118.exe windows:4 windows x86 arch:x86
6c8712c9d819bc1a1ed510081b69bc1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTapeStatus
GetCurrentThread
InterlockedExchange
GetStdHandle
IsDebuggerPresent
GetCurrentProcessId
VirtualProtect
GetTimeFormatA
GetLogicalDrives
GlobalMemoryStatus
HeapQueryInformation
GetModuleHandleA
LoadLibraryExA
GetEnvironmentStringsA
CreateIoCompletionPort
GetACP
GetProcessVersion
HeapDestroy
GetProcessHeap
HeapCreate
WaitForSingleObject
user32
wsprintfA
GetDlgItem
FrameRect
GetClassNameA
BeginPaint
GetWindowTextLengthA
GetWindow
ShowWindow
DrawTextA
GetFocus
FillRect
GetCursorPos
ReleaseDC
GetTitleBarInfo
DragDetect
EndPaint
SetActiveWindow
GetParent
SetForegroundWindow
advapi32
RegEnumKeyA
RegCloseKey
RegFlushKey
RegSetValueExA
RegCreateKeyA
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ