Static task
static1
Behavioral task
behavioral1
Sample
8c4901cea8a026187bbbc78d3495f3d8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c4901cea8a026187bbbc78d3495f3d8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c4901cea8a026187bbbc78d3495f3d8_JaffaCakes118
-
Size
126KB
-
MD5
8c4901cea8a026187bbbc78d3495f3d8
-
SHA1
9e426d2118cabfe38e0a9198e2b4e2f5d6deffb7
-
SHA256
4817492f04ae8904fc3c4f2443e4cabd1ad29deaf33b9f0d79138d5bb9e41a87
-
SHA512
595a1c9c3d198a1e65d20290d2ee66ab68c9706de041e5abb4b6f88ee6dc9ff54d937de162482456c70b36c6a1ff858b3f06da3fd091a7609657d31d18f9640f
-
SSDEEP
1536:RQ4JTG2rlgilJfcT5hEDdHzvKMPHu9F6PSpByt7kchJr:RQ4Tl6ipQhaHDKMPHu94PkByt7BhR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c4901cea8a026187bbbc78d3495f3d8_JaffaCakes118
Files
-
8c4901cea8a026187bbbc78d3495f3d8_JaffaCakes118.exe windows:1 windows x86 arch:x86
6fc7d662a4b407051985ae21be18148c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
lstrcpyA
FindClose
ReadFile
GlobalAlloc
CreateFileA
SetFilePointer
CloseHandle
MultiByteToWideChar
GetModuleFileNameA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GlobalFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetLastError
DeleteFileA
WriteFile
GetLocalTime
GetTimeZoneInformation
msvcrt
_mbsrchr
_mbschr
oleaut32
SysAllocString
SysAllocStringByteLen
user32
wsprintfA
MessageBoxA
ole32
OleInitialize
CLSIDFromProgID
CoCreateInstance
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 365B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.exc Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ