Static task
static1
Behavioral task
behavioral1
Sample
8cf6a04facee6b3e0efa9a580b65a0ad_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8cf6a04facee6b3e0efa9a580b65a0ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cf6a04facee6b3e0efa9a580b65a0ad_JaffaCakes118
-
Size
72KB
-
MD5
8cf6a04facee6b3e0efa9a580b65a0ad
-
SHA1
a0d3d459adb4280f52d44f7a55b889d4d8c1623d
-
SHA256
72629c33362ecea77a33d5600602f0ea3d0a35755a0028e27b6de58fd4f88604
-
SHA512
f754d5e1ae0037d4ddbcc573eca9ea32a3a4e530f09a6334c761d5e56c25ec77b627e1781f8fb2468b287806abffb0ce14838e702654bc2d5b26df363b058f35
-
SSDEEP
768:d92kt3Yyz3y1Rf1s1NorfjW/XHe5PjjaIwhEkhoILv+CqwCqbcsa:zl3YyzCnior78XHQPqukhEwC6c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cf6a04facee6b3e0efa9a580b65a0ad_JaffaCakes118
Files
-
8cf6a04facee6b3e0efa9a580b65a0ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
67b2904de7b71a21679c8aad6c74df42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpyA
GlobalAlloc
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
ReadFile
GetFileSize
ExitProcess
WinExec
GetEnvironmentVariableA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
RtlUnwind
VirtualFree
HeapCreate
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetStringTypeW
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
UpdateWindow
PeekMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
SendMessageA
PostQuitMessage
ShowWindow
MessageBoxA
DefWindowProcA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ