Static task
static1
Behavioral task
behavioral1
Sample
f96f5324484398bfc7c013e6f2247fc2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f96f5324484398bfc7c013e6f2247fc2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f96f5324484398bfc7c013e6f2247fc2_JaffaCakes118
-
Size
8KB
-
MD5
f96f5324484398bfc7c013e6f2247fc2
-
SHA1
7c7eeea02ef5533e08681c6ed3c46977c3a2fb51
-
SHA256
b7ac767b416391c5aee9c7dbbe90cff9ed021cda1ad2959dff5e6ac4e777500d
-
SHA512
e3dcc70ef8eee7567f8bd4bf5f68deb7456e3ff2d0bc539741d0dafdefc7b7ec488d920f1546d25cd8bc7a2b9edadaa75f90e014d3691df6b6459020d9be1cde
-
SSDEEP
96:XHdubdB1UfH3OF8oJEydejVRvx7rJhQBr01GqD3bDr7EhQJZevEVxHRvlgmdTBmn:X9yUyZJEoEVN+vqTCvqbvlvTBW7le
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f96f5324484398bfc7c013e6f2247fc2_JaffaCakes118
Files
-
f96f5324484398bfc7c013e6f2247fc2_JaffaCakes118.exe windows:4 windows x86 arch:x86
b0359257853ecb4c9fbd38a625715066
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
WinExec
GetCurrentThreadId
GetTickCount
GetTempPathA
CreateThread
lstrcpyA
GetPrivateProfileStringA
CopyFileA
DeleteFileA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
VirtualProtectEx
GetCurrentProcess
GetLastError
CreateMutexA
GetCommandLineA
LoadLibraryA
GetProcAddress
Sleep
GetVolumeInformationA
CreateDirectoryA
lstrlenA
advapi32
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
msvcrt
fopen
sprintf
malloc
strstr
_strlwr
fclose
Sections
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE