Static task
static1
Behavioral task
behavioral1
Sample
86d2db7a022ac0e9a94395ecd07cd41a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
86d2db7a022ac0e9a94395ecd07cd41a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86d2db7a022ac0e9a94395ecd07cd41a_JaffaCakes118
-
Size
586KB
-
MD5
86d2db7a022ac0e9a94395ecd07cd41a
-
SHA1
b00a0ac4a2dcd8346beb8dccc9ec9190e3f042f3
-
SHA256
08472ab7b03d52ac10ead9ec5280edc785408ac23081bbb8fe7fcf33e662b215
-
SHA512
b9ed30926224e2449e7c90d8f56bb590435f934eabbcf709f96942d7bb7c02e70e02dcccc814894c0d4ad3baded47725a6558d3727cc7430b82a1111589d0243
-
SSDEEP
12288:QQHeDuUl/ztUKVdzzNsfNNzEHd/3HnWKccOrXfHygD:rHotrVW1NCds5zKgD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86d2db7a022ac0e9a94395ecd07cd41a_JaffaCakes118
Files
-
86d2db7a022ac0e9a94395ecd07cd41a_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0602f23a95b9aba04f62af39ed6cff6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalReAlloc
GetTempPathA
WriteFile
CloseHandle
GetFileType
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CreateProcessA
lstrlenA
ExitProcess
FreeLibrary
GlobalAlloc
GetModuleFileNameA
LoadLibraryA
GetWindowsDirectoryA
DeleteFileA
GetExitCodeProcess
Sleep
GetCurrentDirectoryA
GetCommandLineA
AreFileApisANSI
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
ReadFile
SetFilePointer
GetFileSize
FormatMessageA
FindFirstFileA
FindNextFileA
CreateDirectoryA
FindClose
user32
MessageBoxA
wsprintfA
shell32
ShellExecuteExA
advapi32
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ