Static task
static1
Behavioral task
behavioral1
Sample
8c7cca53ebe02755d3ce25a50f1738a2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c7cca53ebe02755d3ce25a50f1738a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c7cca53ebe02755d3ce25a50f1738a2_JaffaCakes118
-
Size
116KB
-
MD5
8c7cca53ebe02755d3ce25a50f1738a2
-
SHA1
43879625d7f0954f068bd555fb374dbf5534061b
-
SHA256
556e85994fc5701fbc19e635500ae63f26490d5b1e8153eb47afdf9c33fe28e2
-
SHA512
be76c4da522fc765104a4604f047367097679217818e6d8ec44d3eef0adf2476959a6c82eb75ebd88fb74ced73f18c1d28aab580832fc4340a7f218a8576e2ae
-
SSDEEP
768:jhlTQnVEl7HQ6FuFjenKy24VSVMEOosN4gvCaSzNQFRTelC89ryhVet:jnUVB6FuFMZdYMSbt3NQFYg8Eat
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c7cca53ebe02755d3ce25a50f1738a2_JaffaCakes118
Files
-
8c7cca53ebe02755d3ce25a50f1738a2_JaffaCakes118.exe windows:1 windows x86 arch:x86
8fbe0abe64d4d3958cee6c1cfc23941b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
LocalFree
HeapAlloc
MultiByteToWideChar
HeapDestroy
GetCommandLineA
LoadLibraryA
GetTickCount
SetFilePointer
GetProcAddress
GetCommandLineW
CloseHandle
WaitForSingleObject
lstrcpyW
LeaveCriticalSection
CreateFileW
CloseHandle
CreateFileW
WaitForSingleObject
SetFilePointer
ExitProcess
QueryPerformanceCounter
lstrcmpiW
LeaveCriticalSection
WaitForSingleObject
Sections
.ghji Size: 102KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vyuh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.chet Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ytcd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eief Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tqjh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wbij Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jyvi Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iaex Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE