Static task
static1
Behavioral task
behavioral1
Sample
380256b39df9ebfad23e7e1e936bf863_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
380256b39df9ebfad23e7e1e936bf863_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
380256b39df9ebfad23e7e1e936bf863_JaffaCakes118
-
Size
216KB
-
MD5
380256b39df9ebfad23e7e1e936bf863
-
SHA1
2eb3d5eea2b817f6ad47481aa4b3087e66135f92
-
SHA256
12a76128a236bdad4700d24c323ecdf48940046684124f9f4b40f2f3d520eb63
-
SHA512
f900125d38cc7af8c8e4c77cc96ef1e7216721653e2c551dc7e44d908b72f5fa89ccfcd6036111db6bcffbc8e8cd37d926c93ab95824d60e743f8c8532968ed6
-
SSDEEP
3072:ufo4XgE4cD54H8FlH9nmnnnnnnUoFU5rXjoRf0Nrfe4bXKMp/5v0/Myf3B7gGkQv:uP6cCFFURjo+5feJ65oMyp0qw4JLkHM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 380256b39df9ebfad23e7e1e936bf863_JaffaCakes118
Files
-
380256b39df9ebfad23e7e1e936bf863_JaffaCakes118.exe windows:4 windows x86 arch:x86
b87e063fafc4fba14179b785e6231141
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
FindResourceA
GetModuleHandleA
GlobalFree
FindClose
FindNextFileA
FindFirstFileA
GlobalAlloc
MoveFileExA
lstrlenA
CreateProcessA
lstrlenW
LockResource
GetCurrentProcessId
GlobalReAlloc
GetSystemDirectoryA
ExitProcess
lstrcmpA
GetCommandLineA
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
SizeofResource
CreateFileA
WriteFile
CloseHandle
GetLocalTime
SetFileTime
GetSystemTimeAsFileTime
user32
wsprintfA
CharLowerW
shell32
SHGetFolderPathAndSubDirA
ShellExecuteExA
advapi32
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
urlmon
URLOpenStreamA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 201KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ