Static task
static1
Behavioral task
behavioral1
Sample
8d68f3ae2c104163b1d1ef1bb268c85b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d68f3ae2c104163b1d1ef1bb268c85b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d68f3ae2c104163b1d1ef1bb268c85b_JaffaCakes118
-
Size
1.9MB
-
MD5
8d68f3ae2c104163b1d1ef1bb268c85b
-
SHA1
153e71103e466cce0d9d90ebb40c9578ec2f3bea
-
SHA256
4024e7bf4c4a01fac342ac2cf67309e008df13dcb2ff5f20f9fb60ba14a2664d
-
SHA512
5170d1a1b1067bdf5c7db0a60b33272a253ee7fc3930be5d4e06ed2502a99cd8de141ecd9c4da6b787990da90fc2156075fa4b2efd773c53c244ebb0289a0dff
-
SSDEEP
49152:wJAsGPB+kSV0ZsaFWze/ExCYrH72ePibagpxdPVvU:fJPB+kSZIkt3Pwag7RVvU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d68f3ae2c104163b1d1ef1bb268c85b_JaffaCakes118
Files
-
8d68f3ae2c104163b1d1ef1bb268c85b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c840528e1cffcf9d77f482af3e5c6870
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
advapi32
RegQueryValueExA
RegSetValueExA
OpenSCManagerA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
comdlg32
GetOpenFileNameA
Sections
.text Size: 23KB - Virtual size: 27.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE