Static task
static1
Behavioral task
behavioral1
Sample
f5bb2ccde51a1126f3012b7190e98fe1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5bb2ccde51a1126f3012b7190e98fe1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5bb2ccde51a1126f3012b7190e98fe1_JaffaCakes118
-
Size
20KB
-
MD5
f5bb2ccde51a1126f3012b7190e98fe1
-
SHA1
6acfbe9cc85ee557b8eaac3f7c4d071cfcfc5bd8
-
SHA256
b5406b2ac5523f9f15a93b37bee04cefc04bb0a81a92dda82abed9f1987a8074
-
SHA512
f4fb77b1c17dddc9fd99e53c0724ffc51a05d0739698f6af18793600fc1574bb9e36b673aa93dbaca4106e23536ec6f3c5efc89edf6c26689157de7dcd247c7a
-
SSDEEP
384:iEv2YP8tPP51vM3GEquPicikzdktKTOtVrsecbsiEXDIDhulnfWjvOeo:i7VJE3iuPicikzdbOtFsecAiEEDsln
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5bb2ccde51a1126f3012b7190e98fe1_JaffaCakes118
Files
-
f5bb2ccde51a1126f3012b7190e98fe1_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf164a62e8570043cb1cf4fe11fd8f42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
CreateEventA
WriteFile
SetFilePointer
WaitForSingleObject
lstrlenA
GetModuleFileNameA
LoadLibraryA
lstrcatA
CloseHandle
lstrcpyA
GetTempPathA
GetFileAttributesA
GetModuleHandleA
CreateFileA
GetProcAddress
ExitProcess
ReadFile
SetEvent
OpenProcess
Sleep
GetSystemDirectoryA
ExitThread
GetLastError
CreateMutexA
GetVersionExA
CreateThread
lstrcmpA
ResetEvent
WaitForMultipleObjects
RtlUnwind
user32
SetThreadDesktop
ShowWindow
PeekMessageA
CreateWindowExA
DispatchMessageA
CreateDesktopA
MsgWaitForMultipleObjects
DestroyWindow
CharToOemA
wsprintfA
TranslateMessage
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegNotifyChangeKeyValue
RegOpenKeyA
shell32
SHGetFolderPathA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ