Static task
static1
Behavioral task
behavioral1
Sample
03ad84bf2fa2fd66b57f649ad77f1e4a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03ad84bf2fa2fd66b57f649ad77f1e4a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03ad84bf2fa2fd66b57f649ad77f1e4a_JaffaCakes118
-
Size
84KB
-
MD5
03ad84bf2fa2fd66b57f649ad77f1e4a
-
SHA1
0dc3b81fe81ca625968f68c3ec2dd27a7f50e0cd
-
SHA256
8dfceca891f87a5e96559bb88438d3a41522bc56dea32e79b08bda54683f85c1
-
SHA512
9686f4bdc023ff084955b759f9454e3f031f6d1080a2e0b1b2e0b3786387b29eb96a72715b823c1b1cdc00f75d6df9332cad651c9a61d7e4e2faf8d0db972d96
-
SSDEEP
1536:VOXDwSt+RnhzshkZpWjrBOXMRSubS3CHoIMkwvhAZQwBa2FE4Dk:VOXDwStSEBOXeSCSBIBqAL5m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03ad84bf2fa2fd66b57f649ad77f1e4a_JaffaCakes118
Files
-
03ad84bf2fa2fd66b57f649ad77f1e4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
897bb75fe81ae1929c7ba42a40a262ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
CreateProcessA
GetEnvironmentVariableA
CreateDirectoryA
GetProcAddress
LoadLibraryA
WriteFile
GetModuleHandleA
GetVersionExA
CloseHandle
GetTempPathA
DeleteFileA
lstrcpyA
WaitForSingleObject
LoadResource
FindResourceA
CreateFileA
LockResource
ExitProcess
setupapi
SetupIterateCabinetA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
user32
wsprintfA
MessageBoxA
Sections
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ