Static task
static1
Behavioral task
behavioral1
Sample
8c7ab6be92b0ae3d9cb3a75368fbf00c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c7ab6be92b0ae3d9cb3a75368fbf00c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c7ab6be92b0ae3d9cb3a75368fbf00c_JaffaCakes118
-
Size
128KB
-
MD5
8c7ab6be92b0ae3d9cb3a75368fbf00c
-
SHA1
14763336096027abf7576b529b117d66a7ed01dc
-
SHA256
ad49d881e4a0af289e8a947acb3a131ce0695f2f4da1ee6e2974b4252b80f4b1
-
SHA512
0572c65e4f17d35969f35fe7ab75282f1c2cff7c8a9e8ef2fbdcce9ddd94b565134645b9686efb387ea0e57b2a18d47c3f2daf79caab848062525b2d459d659b
-
SSDEEP
3072:15LK1VHyGK1/jwt3CkyV1OK1Jdu6F2Kt5SVi:12yGIkZC7V1Vdu6/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c7ab6be92b0ae3d9cb3a75368fbf00c_JaffaCakes118
Files
-
8c7ab6be92b0ae3d9cb3a75368fbf00c_JaffaCakes118.exe windows:4 windows x86 arch:x86
5356d5415714454d79ed56dfea83ecec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumValueA
kernel32
IsBadReadPtr
GetACP
GetLocalTime
GetCommandLineA
GetCommandLineW
GetModuleFileNameA
ExitProcess
GetLastError
GetModuleHandleA
ExitThread
GetModuleHandleW
VirtualAlloc
GetFileType
LoadLibraryA
GetProcAddress
oleaut32
SysReAllocStringLen
SafeArrayGetElement
VariantChangeType
RegisterTypeLib
SysAllocStringLen
SysFreeString
VariantCopyInd
SafeArrayGetUBound
GetErrorInfo
shell32
SHGetSpecialFolderLocation
Shell_NotifyIconA
SHGetFileInfoA
SHGetFolderPathA
SHGetDesktopFolder
ole32
GetHGlobalFromStream
version
VerInstallFileA
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ