Static task
static1
Behavioral task
behavioral1
Sample
8d7cfc61e52f02752ae1831826d27b4b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8d7cfc61e52f02752ae1831826d27b4b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d7cfc61e52f02752ae1831826d27b4b_JaffaCakes118
-
Size
498KB
-
MD5
8d7cfc61e52f02752ae1831826d27b4b
-
SHA1
102ed5ff338e970f3cfd0669e5ef4ce03da60d93
-
SHA256
967842bef008811d786da130340c7f5755d4ce2535f937fc3da697e580405872
-
SHA512
e80def3b3499aabc6f7c552effb25fd553fea107c7e8735b2a838cffcd264f56950fb62abab7d7359512ebf722fa396eceb2a307550bc500b5e4a6726169618f
-
SSDEEP
12288:+yHx0H+pgoJdDRUD0Y5uIUH2hANuxIeNKJRNf:5HyepgoJ4bwHzAenJ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d7cfc61e52f02752ae1831826d27b4b_JaffaCakes118
Files
-
8d7cfc61e52f02752ae1831826d27b4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
450696b966d8727f7def654307d701ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesA
GetConsoleCursorInfo
WritePrivateProfileSectionW
UnmapViewOfFile
LeaveCriticalSection
GetFileType
CompareStringW
GlobalReAlloc
GetCommandLineW
ConnectNamedPipe
GetProcessHeap
IsValidLocale
GetBinaryTypeA
EndUpdateResourceA
CancelIo
EnumSystemCodePagesW
LoadLibraryExA
GetSystemTime
GetModuleFileNameW
GetVolumeInformationW
ExitThread
SetCurrentDirectoryA
SuspendThread
WriteProcessMemory
WaitNamedPipeA
VirtualQuery
FreeLibrary
GetOverlappedResult
SetLastError
FlushFileBuffers
GlobalFree
_hread
ExitProcess
user32
UpdateWindow
DrawAnimatedRects
MessageBoxIndirectW
SendMessageTimeoutW
ChildWindowFromPoint
GetKeyboardLayoutNameW
DispatchMessageA
GetMonitorInfoW
SetWindowLongA
ReleaseDC
FindWindowW
GetClipboardFormatNameA
version
VerQueryValueA
advapi32
CryptAcquireContextA
RegisterServiceCtrlHandlerW
RegOpenKeyA
SetTokenInformation
GetSecurityDescriptorGroup
LookupAccountSidA
RegQueryInfoKeyW
CryptCreateHash
LogonUserW
ws2_32
WSAAsyncGetHostByName
recv
WSAConnect
getprotobyname
ole32
ReadClassStg
ReadClassStm
oleaut32
QueryPathOfRegTypeLi
SafeArrayRedim
LoadTypeLi
SafeArrayUnaccessData
SafeArrayPutElement
Sections
.text Size: 2KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ