Static task
static1
Behavioral task
behavioral1
Sample
89db4ca36902355da15dbad71eceb6cc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
89db4ca36902355da15dbad71eceb6cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89db4ca36902355da15dbad71eceb6cc_JaffaCakes118
-
Size
144KB
-
MD5
89db4ca36902355da15dbad71eceb6cc
-
SHA1
39e15ebf7f3a0b704f5a4a6852163a05a7ea963c
-
SHA256
8f83163930eb4f422bff76a7a9a0c562c68b5fad2915555cec830d6430649eac
-
SHA512
8f2baa1aef167ed7694b10fcae6ce2113deb229785ab8cd3101966ec603e9cb94ba7c58e57af670b77e59a3fbb472715db29ef0a25a751e328114823d0797840
-
SSDEEP
3072:j75cH9Cty1HDFJAhEBTg7SfnWwDNV/DXqzF4xBN:j7qH9CiwhEBGFwxZe4xBN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89db4ca36902355da15dbad71eceb6cc_JaffaCakes118
Files
-
89db4ca36902355da15dbad71eceb6cc_JaffaCakes118.exe windows:5 windows x86 arch:x86
9dbf2d86ccd10060b9323dd8da778b63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptDestroyHash
CryptHashData
RegCreateKeyExA
RegSetValueExA
shlwapi
PathCombineW
PathFileExistsW
PathFindFileNameW
StrCmpNIA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CloseWindowStation
ExitWindowsEx
FindWindowExA
GetClassNameA
GetDlgItemTextA
GetForegroundWindow
GetMenuItemID
GetWindowLongA
PeekMessageA
Sections
.xah Size: 48KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ihap Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gpcnqh Size: 6KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ