Static task
static1
Behavioral task
behavioral1
Sample
622e3b210e1fdc32b56840d6185144cc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
622e3b210e1fdc32b56840d6185144cc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
622e3b210e1fdc32b56840d6185144cc_JaffaCakes118
-
Size
604KB
-
MD5
622e3b210e1fdc32b56840d6185144cc
-
SHA1
0a7de034019d015c9d20348aec4113bb441a8f78
-
SHA256
7619adee8e84bfd9cd469a7093226f30b00ab601d9d58bed12c682f0badb9152
-
SHA512
0c3c36909edde5e65675c9110d8b7932b0641172c124b19e5ed3ee15063661dad196a76f6e09592968731ef38e99803bc9c4714f31a6317221be30c013e920f0
-
SSDEEP
12288:PboP8vO0JpyP3y6fNw7k5a3l0ch0+S0RHRtmE4aj0yNTnJ:skvOsp8wg5a3lrh0SRHR/4wTJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 622e3b210e1fdc32b56840d6185144cc_JaffaCakes118
Files
-
622e3b210e1fdc32b56840d6185144cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
0799a44c10c104bfe49321d7063d7852
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHSetValueA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
SHCreateDirectoryExA
msvcrt
fwrite
free
malloc
fclose
fopen
_c_exit
_exit
_XcptFilter
ldiv
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
rand
sprintf
isdigit
isgraph
islower
isprint
ispunct
isspace
isupper
isxdigit
atoi
div
isalnum
isalpha
ceil
_cexit
kernel32
lstrcatA
SleepEx
WritePrivateProfileStringA
OutputDebugStringA
CloseHandle
GetStartupInfoA
WinExec
GetTickCount
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
DeleteFileA
Sections
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 578KB - Virtual size: 578KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ