Static task
static1
Behavioral task
behavioral1
Sample
f8e15845a184c72b05fc82e8c8e04d2e_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f8e15845a184c72b05fc82e8c8e04d2e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8e15845a184c72b05fc82e8c8e04d2e_JaffaCakes118
-
Size
44KB
-
MD5
f8e15845a184c72b05fc82e8c8e04d2e
-
SHA1
c96608cd2e28eda59281f22e04ce60139df2cc2a
-
SHA256
de6989ee6791dd261b72537169b2de892e27ebdb16b0fef90623f901d5f46e21
-
SHA512
9794154e009182bcd2e7e304a2c30342c2be66c45df78719860f6d8602465a8d981a49598421be0f52f231cecc9d1485853e6311ff743ab066839368434c8de8
-
SSDEEP
768:Eh3e3I3Q3rBO7zTzX85CHuY6EqPIClGux5e75WrfBPnRgZcA+aEPTFaji:g3e3I3Q3r2A5SiImGCM54gXuFa+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8e15845a184c72b05fc82e8c8e04d2e_JaffaCakes118
Files
-
f8e15845a184c72b05fc82e8c8e04d2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0d5a15991fbbee70da0f6fdf7e75a36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateFileA
FindAtomA
lstrcmpA
lstrlenA
GetModuleFileNameA
lstrcpynA
CreateMutexA
CloseHandle
GetVersion
GetTickCount
GetTempPathA
GetSystemTime
WriteFile
lstrcpyA
GetCommandLineA
CreateProcessA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent
user32
wsprintfA
ClientToScreen
GetCursorPos
GetCaretPos
EqualRect
GetWindowRect
IsWindowVisible
GetFocus
InflateRect
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE