Static task
static1
Behavioral task
behavioral1
Sample
8acee7c6b76eb6fd9b4386263830806d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8acee7c6b76eb6fd9b4386263830806d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8acee7c6b76eb6fd9b4386263830806d_JaffaCakes118
-
Size
32KB
-
MD5
8acee7c6b76eb6fd9b4386263830806d
-
SHA1
ec01209ac7c7594928371d3d78384a27aebf571d
-
SHA256
5885e4f11e564da040ba2a24866a81883481d0f82ef90c63a05044cf491dc63a
-
SHA512
6936989a88e3da53219cc4ef5b8c400d99b94155a95f14b9d495d9808d667242d78717c8a5a61c1a9173025b1673f49d38c729f7b70192f2bcb3bb6016daf4aa
-
SSDEEP
384:AWyvYpdnxMXiifc4HF+3rO/GJEzzuWzQI1snXtIXuov6LsSQ:PywpwXiGIr6QEzzFxsXtqhyLfQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8acee7c6b76eb6fd9b4386263830806d_JaffaCakes118
Files
-
8acee7c6b76eb6fd9b4386263830806d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c380821dc76453f757a6366c8ddef61a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetLastError
Sleep
CreateThread
lstrcmpiA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
GetTickCount
ExitThread
CreateFileA
GetLocaleInfoA
GetVersionExA
LoadLibraryA
GetProcAddress
GetModuleHandleA
ExpandEnvironmentStringsA
GetModuleFileNameA
ReleaseMutex
CreateMutexA
TerminateThread
GetFileAttributesA
CopyFileA
SetFileAttributesA
GetWindowsDirectoryA
GetTempPathA
GetStartupInfoA
user32
FindWindowA
msvcrt
_controlfp
strcpy
strcat
sprintf
free
memcpy
memset
malloc
strncpy
strlen
_vsnprintf
??2@YAPAXI@Z
strcmp
strstr
strchr
rand
_snprintf
strtok
memcmp
srand
atoi
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE