Static task
static1
Behavioral task
behavioral1
Sample
2b8c517a3042905ea2784ec2ac78c714_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b8c517a3042905ea2784ec2ac78c714_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b8c517a3042905ea2784ec2ac78c714_JaffaCakes118
-
Size
16KB
-
MD5
2b8c517a3042905ea2784ec2ac78c714
-
SHA1
3545bdfcd72e3ebb0c7a4be31634931e872a7e7a
-
SHA256
04a7a00d7b560d01828f5bc3719f550262d87f89d9325d54cf4404310552d33d
-
SHA512
85326875e54268c390b5f2a8001a1a7b98d60761990b699729c978586acec5000734a75abf90768a523a17c60750e7eeda10d3114037c717a8add22367ec13b3
-
SSDEEP
192:f8g58dux1Z8F274/JQtCBdH0dHRdHwdHPH1SdHK18G+j5P:fh5Nx1Z8jxQtCBqrmuw+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b8c517a3042905ea2784ec2ac78c714_JaffaCakes118
Files
-
2b8c517a3042905ea2784ec2ac78c714_JaffaCakes118.exe windows:4 windows x86 arch:x86
40c3e825b117e42d1038dc7e7c689122
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
Sleep
CopyFileA
GetLastError
ExitProcess
CreateMutexA
OpenFile
FindClose
FindFirstFileA
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 562B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE