Static task
static1
Behavioral task
behavioral1
Sample
893d3baa2c7d24d7f954f5fb7a60ebdd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
893d3baa2c7d24d7f954f5fb7a60ebdd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
893d3baa2c7d24d7f954f5fb7a60ebdd_JaffaCakes118
-
Size
42KB
-
MD5
893d3baa2c7d24d7f954f5fb7a60ebdd
-
SHA1
03844c013fe9efac2cce65c3cf3ae44b05acbdef
-
SHA256
0fe2aaecb2aa5654656a075026f22b6c268b4f2441e95c65a4ab49223aa35e4a
-
SHA512
9bb0266d3fd370deb3ae5933594d55cd3e6c6f2311f5a0e35d3f673dfe7828a61583e22ba8280e2b9cd654e1d63238f8f9c2427870f1f2fab3531ed4db153cee
-
SSDEEP
768:xzFCElulpKWeBILH4IY9lM83+NZPIO6nToIf1+VcHo:tFxlulUzZIClM8WJIO6nToIfU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 893d3baa2c7d24d7f954f5fb7a60ebdd_JaffaCakes118
Files
-
893d3baa2c7d24d7f954f5fb7a60ebdd_JaffaCakes118.exe windows:5 windows x86 arch:x86
585db66d87f22f7d9f12b22dab5b5488
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateProcessA
ReadFile
GetModuleFileNameW
GetSystemDirectoryA
CreateFileW
VirtualAlloc
GetTempFileNameA
GetModuleFileNameA
WriteFile
GetTempPathA
SetFilePointerEx
GetCurrentProcess
GetVersionExW
DeviceIoControl
GetStartupInfoW
GetModuleHandleW
GetTickCount
VirtualFree
SetFilePointer
GetFileSize
CreateFileA
CloseHandle
user32
wsprintfW
FindWindowW
advapi32
FreeSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
CheckTokenMembership
shell32
ShellExecuteExW
msvcrt
_initterm
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
srand
sprintf
strncat
_strnicmp
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
memcpy
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 650B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ