Static task
static1
Behavioral task
behavioral1
Sample
89592553b8a7c7dda6006233984e8c2f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89592553b8a7c7dda6006233984e8c2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89592553b8a7c7dda6006233984e8c2f_JaffaCakes118
-
Size
323KB
-
MD5
89592553b8a7c7dda6006233984e8c2f
-
SHA1
a4dad858e3512b27075f30e59f4399ace0332f1c
-
SHA256
8fac18eb1e4e765d3587cdafa6c01155a0eb2eb51319579600feb4f76325d014
-
SHA512
639033e322a425015816f94faef3834a3cbf396b44ea35d14e686cf1e44b0fa0b6636c5eb0d0d06aeeaf00d36222618801ed3c8eddfb26a0d08c1017b3306748
-
SSDEEP
6144:B9zHO33E+zs+DnbTpsq+7aDhGeVFiVMIqhYP0vFb+POYt7dZCsRD:b7O33v4+7fpsq+SocAPstnYthZP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89592553b8a7c7dda6006233984e8c2f_JaffaCakes118
Files
-
89592553b8a7c7dda6006233984e8c2f_JaffaCakes118.exe windows:5 windows x86 arch:x86
fc70e8008eaf885586190f83d63dcf9f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptCreateHash
kernel32
lstrcatW
shlwapi
PathCombineW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
wnsprintfA
wvnsprintfW
user32
CharLowerBuffA
DispatchMessageA
DrawIcon
FindWindowExA
GetDlgItemTextA
GetIconInfo
GetKeyboardState
GetMessageA
GetWindowTextA
LoadCursorA
OpenWindowStationA
Sections
.xqfgb Size: 43KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dwd Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dcn Size: 6KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ