Static task
static1
Behavioral task
behavioral1
Sample
790911a8045250aa5bc5a42d3e6497e6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
790911a8045250aa5bc5a42d3e6497e6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
790911a8045250aa5bc5a42d3e6497e6_JaffaCakes118
-
Size
131KB
-
MD5
790911a8045250aa5bc5a42d3e6497e6
-
SHA1
3c20055d284764af890cba24823eb4c30d6cddf6
-
SHA256
08e86b0e1e63ac1c674d9821ee8cad782afd8a86edb7eecea022ea24822986e1
-
SHA512
ea1c52c8c3bda955d17aa88ca8cd600aa6a1767e88923a3f08d62de463943d1ad87fad5377997e8245a6f61aaf99faf6b2658448252905dafabad0fd372cd8c5
-
SSDEEP
3072:P6LNa0QEWQsB6YRqG31mqVtEWhPvIQljads5:0oKsBnftzhPvIldu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 790911a8045250aa5bc5a42d3e6497e6_JaffaCakes118
Files
-
790911a8045250aa5bc5a42d3e6497e6_JaffaCakes118.exe windows:5 windows x86 arch:x86
740f5d5b01bbfbe455bc732b84a719f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
wvnsprintfA
StrRChrA
StrCmpNIA
imagehlp
CheckSumMappedFile
psapi
GetProcessImageFileNameA
kernel32
OpenProcess
GetTempFileNameA
GetTempPathA
GetProcAddress
GetModuleHandleA
GlobalAlloc
LoadLibraryExA
GlobalFree
FreeLibrary
CreateFileA
GetProcessHeap
HeapAlloc
DeviceIoControl
HeapFree
CloseHandle
lstrcpyA
CreatePipe
CreateProcessA
WaitForSingleObject
DeleteFileA
MoveFileExA
WideCharToMultiByte
lstrlenA
lstrcpynA
GetCurrentProcess
GetPrivateProfileStringA
GetVersionExA
GetPrivateProfileStructA
WritePrivateProfileStructA
GetPrivateProfileIntA
CreateDirectoryA
GetFileAttributesA
CopyFileA
MoveFileA
Sleep
lstrcatA
GetFileTime
SetFileTime
WriteFile
GetFileSize
SetFilePointer
lstrcmpiA
WritePrivateProfileStringA
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyA
shell32
SHGetSpecialFolderPathA
CommandLineToArgvW
ole32
CoCreateGuid
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kcode Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dcode Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xcode Size: 1024B - Virtual size: 535B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE