Static task
static1
Behavioral task
behavioral1
Sample
f876fdf64a6eba52b2ca188c263f721c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f876fdf64a6eba52b2ca188c263f721c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f876fdf64a6eba52b2ca188c263f721c_JaffaCakes118
-
Size
8KB
-
MD5
f876fdf64a6eba52b2ca188c263f721c
-
SHA1
4333de086962a62fe3f7b5bd77c92137ec195376
-
SHA256
ec50a04c8ca32630e99912b59947523417310bd917b7368625b58f23e551ba4d
-
SHA512
0a4c54106f377f825ce39f8e39ef1030e3e0682b5b4caf1f178674163c2156322cfc46e5fe67132c8845eb15063aa46f5d170a3e5653e2bda4804bc4a3acbc84
-
SSDEEP
48:OEPCeW5FrdomN6ymJ9IfBOXKBgvdZoET86M:nPJW5xHaXEPKli/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f876fdf64a6eba52b2ca188c263f721c_JaffaCakes118
Files
-
f876fdf64a6eba52b2ca188c263f721c_JaffaCakes118.exe windows:1 windows x86 arch:x86
1645ab5844541803487327c2fde43e4c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FindFirstFileA
GetSystemTime
CopyFileA
GlobalAlloc
GetCommandLineA
ExitProcess
CreateProcessA
GlobalLock
FindNextFileA
GlobalUnlock
MoveFileA
SetCurrentDirectoryA
lstrcpyA
GetCurrentDirectoryA
user32
CloseClipboard
SetClipboardData
OpenClipboard
MessageBoxA
ExitWindowsEx
EmptyClipboard
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ