Static task
static1
Behavioral task
behavioral1
Sample
6670d8380e1d17592b09371b4b63a1a6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6670d8380e1d17592b09371b4b63a1a6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6670d8380e1d17592b09371b4b63a1a6_JaffaCakes118
-
Size
11KB
-
MD5
6670d8380e1d17592b09371b4b63a1a6
-
SHA1
20396f61c3059be851d5b28d117486acb7aa95b4
-
SHA256
e90df517afc6bf59bdd14b348062a21b45a1c024280b35a57f56e6c45441978e
-
SHA512
f5ef398748ed99c870971a94ee14aa32690510de2eb3ef9813ea21d5be3b9b7964bcf634ced9506ff8844e7fe4f509bc1c344b1874a5d0da94a1514ee5c4d813
-
SSDEEP
192:rPGD6g9VFWhKN3j9xR0ozDIl0O1v+fPlN+sZcAE1lwW/8AoWE:rPGum6iTR0yIlT1v+fPlN+sZvE1+W/8c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6670d8380e1d17592b09371b4b63a1a6_JaffaCakes118
Files
-
6670d8380e1d17592b09371b4b63a1a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
c9273bbef19c6c167889e41a8b1740f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
OpenThread
Thread32First
GetCurrentProcess
DuplicateHandle
CreateFileA
GetProcAddress
LoadLibraryA
GetTempFileNameA
Sleep
CopyFileA
GetTempPathA
SuspendThread
GetPrivateProfileStringA
ExitProcess
GetSystemTime
WritePrivateProfileStringA
MoveFileExA
SetFileAttributesA
QueryPerformanceCounter
GetModuleFileNameA
GetWindowsDirectoryA
QueryPerformanceFrequency
CreateThread
Thread32Next
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
TerminateProcess
CloseHandle
GetSystemDirectoryA
lstrlenA
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
OpenProcessToken
msvcrt
strcmp
memset
strcat
strcpy
strrchr
atoi
sprintf
_except_handler3
_stricmp
_itoa
shlwapi
PathAppendA
Sections
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ