Static task
static1
Behavioral task
behavioral1
Sample
7851d817bd44a7d6b6aad8d3c801eeef_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7851d817bd44a7d6b6aad8d3c801eeef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7851d817bd44a7d6b6aad8d3c801eeef_JaffaCakes118
-
Size
43KB
-
MD5
7851d817bd44a7d6b6aad8d3c801eeef
-
SHA1
1167cf0587329791a76dae52b6a03418fb908aa5
-
SHA256
7a03f8e9d6db536cfbc579d054017e86bc19237963c48c01a08aed0b49d09ccf
-
SHA512
02eddb0ce31dd7b166273913ec15a4bf6ecfd4a930c8729dd82deb913844323acb8d97233d24f7ebcb8342188cdb0ae79de5a2981fb85cb1b46901d2fa7d8041
-
SSDEEP
768:EPwHU8qpxxKlY03R2TLpe6+cXCtj+Ug3oAcs40d61l13REKb:EPwzqpxszB2f+Ee6Ui5cs47LF6g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7851d817bd44a7d6b6aad8d3c801eeef_JaffaCakes118
Files
-
7851d817bd44a7d6b6aad8d3c801eeef_JaffaCakes118.exe windows:5 windows x86 arch:x86
ff6ba3b2151e0b5a3206d8dfa0aacc95
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynW
EnterCriticalSection
FindClose
DisconnectNamedPipe
CopyFileW
HeapFree
CreateMutexW
SetFileTime
SetLastError
GetUserDefaultUILanguage
SetFileAttributesW
GetModuleFileNameA
GetSystemTimeAsFileTime
CloseHandle
GetTimeZoneInformation
MoveFileExW
GetTempPathW
lstrcmpiA
GetModuleHandleA
CreateThread
GetCurrentThread
HeapAlloc
MultiByteToWideChar
WriteFile
GlobalLock
lstrlenA
SetEndOfFile
ReleaseMutex
SetThreadPriority
FindFirstFileW
Sections
.@@@@ Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ