Static task
static1
Behavioral task
behavioral1
Sample
69aeef4efadec666811f20eb6d37e88e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69aeef4efadec666811f20eb6d37e88e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69aeef4efadec666811f20eb6d37e88e_JaffaCakes118
-
Size
28KB
-
MD5
69aeef4efadec666811f20eb6d37e88e
-
SHA1
7b811da5e7379ae511b723651a0c8435d26c17c9
-
SHA256
def373fa293f18e0063ca3a04eee65a9136ca9832a9e256c17248a63b1e600af
-
SHA512
e101b8db11b83936280ef22ee9e2cc97381cdd42e87c108da6cf39c7ce44fbf1ae288b46efab37c59bf0f5c933be7b36ecf846e44b9f4c4716ce0e60a8ef42a5
-
SSDEEP
384:oe7kfTU5oN+3VFqenF2+mpoyZlHCII7HGDVcelV6GhYWHMSMmuHSdcGFBFjdvNd:oeQSoM3yIuMd7Kc6V6uXHhAkBFjJj
Malware Config
Signatures
Files
-
69aeef4efadec666811f20eb6d37e88e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b2dc91b08e70e1f3d603ae3c25f1286a
Code Sign
a5:be:8d:0c:cb:07:9f:1c:0c:9b:78:20:6a:81:19:00:51:45:f1:7dSigner
Actual PE Digesta5:be:8d:0c:cb:07:9f:1c:0c:9b:78:20:6a:81:19:00:51:45:f1:7dDigest Algorithmsha1PE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
WriteFile
CreateFileA
GetTickCount
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CloseHandle
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
Sleep
SetCurrentDirectoryA
GetSystemDirectoryA
GetCurrentThreadId
user32
PeekMessageA
PostThreadMessageA
wsprintfA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 720B - Virtual size: 714B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ