Static task
static1
Behavioral task
behavioral1
Sample
08650f3698059872a0a9c2fde63f84b1_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08650f3698059872a0a9c2fde63f84b1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08650f3698059872a0a9c2fde63f84b1_JaffaCakes118
-
Size
856KB
-
MD5
08650f3698059872a0a9c2fde63f84b1
-
SHA1
45b7ebeeb02a1730a5a6dfd13706ae8a429f00a1
-
SHA256
49d501a382d2b6a054b723e230bd5f6d9550cd35de7fa2c9b85b15b45b72fff2
-
SHA512
913228b9f915ccc3dd1ba99a0e7a5c1b52ae26f3056adcfbb5f4e4045a3ef87b4c422b06e9e64248d7c7d191ac4988ee4cc6d63f8f27eea1693543992c9407a6
-
SSDEEP
12288:684AKN7pikVgn84I1W5AhhE5NmL1lqVYL:68pIlgnc1W5AhhEa5gs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08650f3698059872a0a9c2fde63f84b1_JaffaCakes118
Files
-
08650f3698059872a0a9c2fde63f84b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
2a58be30853aa58670c004f122b383da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
CopyFileA
GetLogicalDriveStringsA
FreeResource
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetCurrentDirectoryA
GetWindowsDirectoryA
WinExec
DeleteFileA
FindResourceA
SetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
SetFilePointer
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetStringTypeW
user32
FindWindowA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
SetTimer
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 812KB - Virtual size: 809KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ