Static task
static1
Behavioral task
behavioral1
Sample
8bead29ad1d728431014429805258b8c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8bead29ad1d728431014429805258b8c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8bead29ad1d728431014429805258b8c_JaffaCakes118
-
Size
198KB
-
MD5
8bead29ad1d728431014429805258b8c
-
SHA1
041d96315bce1fe4776978eff0dd3f4712e06a9d
-
SHA256
a2a073ff2ac8e5c84f0b81cb4338e8cbdb8678bb5ecb46438877a7ec0e08357e
-
SHA512
050f338292d927ebe466930b976450e69e06c7e0de3c448a46722fb29b494c1941855e593e44ecfcfb357c5f255c766f864d6b5579ab94eba99ad1350fc1fdfc
-
SSDEEP
3072:IJRA+hjXyRg6A0E9ovlNX8rXKyemL7AHEqmdod3SxfuQQi:yA0XbroYrdodipun
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bead29ad1d728431014429805258b8c_JaffaCakes118
Files
-
8bead29ad1d728431014429805258b8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
46b371bade2cb685e2be3f637b784665
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetThreadLocale
GetModuleHandleA
GetWindowsDirectoryA
MulDiv
lstrlenA
GetModuleHandleW
GetStartupInfoA
GetVersion
lstrcmpiW
GetCurrentProcess
GetCurrentThreadId
GetOEMCP
lstrcmpiA
GetProcessHeap
GetConsoleOutputCP
Sleep
lstrlenW
RemoveDirectoryA
DeleteFileA
lstrcmpA
GetCurrentProcessId
GetCommandLineA
VirtualAlloc
LoadLibraryW
GetUserDefaultLangID
CopyFileA
GetTickCount
GetLastError
IsDebuggerPresent
GetACP
GlobalFindAtomW
QueryPerformanceCounter
GetCurrentThread
GetDriveTypeA
SetCurrentDirectoryA
GetCommandLineW
GlobalFindAtomA
SetLastError
user32
GetDesktopWindow
GetDC
CharNextA
GetSystemMetrics
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ