Static task
static1
Behavioral task
behavioral1
Sample
685b2d589bc210f93479cfbcb42e53b9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
685b2d589bc210f93479cfbcb42e53b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
685b2d589bc210f93479cfbcb42e53b9_JaffaCakes118
-
Size
225KB
-
MD5
685b2d589bc210f93479cfbcb42e53b9
-
SHA1
8a2ae0301ee2273a2309d6469f514595c157f616
-
SHA256
49e0859cc855cef99ce1b32a91650bb6de91fd539db85cd3aa7e5fc272fb56b0
-
SHA512
7e8eaf390fc316b816f8a11f2f97415169a4ad9f993c79689605f905656a437d832f51bff9a21070d383a17baf4dfc360abed668d19e864b90c0bb02c36e1534
-
SSDEEP
6144:Nb6ztwtdoe1MSEoTSszh/U24bEkAjy059fth1:lPd9EEdjyi51
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 685b2d589bc210f93479cfbcb42e53b9_JaffaCakes118
Files
-
685b2d589bc210f93479cfbcb42e53b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a4c3ed95a1bb8b5028f3c0b77572f36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
FindResourceA
GetModuleHandleA
FindClose
lstrlenA
FindNextFileA
FindFirstFileA
GlobalFree
CreateProcessA
GlobalAlloc
ExitProcess
LockResource
GetWindowsDirectoryA
GetSystemDirectoryA
GetCommandLineA
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
SizeofResource
CreateFileA
WriteFile
CloseHandle
GetLocalTime
SetFileTime
user32
wsprintfA
advapi32
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ