Static task
static1
Behavioral task
behavioral1
Sample
88f5cb454784321e42030d14427ce9de_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
88f5cb454784321e42030d14427ce9de_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88f5cb454784321e42030d14427ce9de_JaffaCakes118
-
Size
30KB
-
MD5
88f5cb454784321e42030d14427ce9de
-
SHA1
2f89d414f4b6ec9fe953cc9d8688b58aa5a0a44f
-
SHA256
004e4794e8b680bec9bd0381174f01d205da7749f102295a653abc30880f0545
-
SHA512
8bcc914de90979f05c49e693f3161ca515a78596799bb04d0c4d26a23a9a52f1fcd38fa746b1da541dc13dc378fb8735911d091fe30a8ab14cd07c490a4fa83a
-
SSDEEP
384:IC6gtppZ5K6FHYXjjCRTiMwukK8sRY3tPkiy6Y+WE4HCwoD9:IZgJZ59F4XjGUqkKY8iC9HCwoD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88f5cb454784321e42030d14427ce9de_JaffaCakes118
Files
-
88f5cb454784321e42030d14427ce9de_JaffaCakes118.exe windows:4 windows x86 arch:x86
f4330c1b112fcf22953d653874eb6cf4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CreateEventA
OpenEventA
Sleep
CopyFileA
DeleteFileA
ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
CreateThread
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetModuleFileNameA
MoveFileExA
lstrcpyA
lstrcatA
FindFirstFileA
GetTempFileNameA
FindClose
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
user32
wsprintfA
advapi32
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
comctl32
InitCommonControlsEx
urlmon
CreateURLMonikerEx
oleaut32
SysFreeString
SysAllocStringLen
SysAllocString
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ