Static task
static1
Behavioral task
behavioral1
Sample
8e7b59eb7e3e3a8da2ccd70dc4a9c116_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e7b59eb7e3e3a8da2ccd70dc4a9c116_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e7b59eb7e3e3a8da2ccd70dc4a9c116_JaffaCakes118
-
Size
2.1MB
-
MD5
8e7b59eb7e3e3a8da2ccd70dc4a9c116
-
SHA1
6e4b24c9468c651829fc8041153b8cdac9ad21bd
-
SHA256
c80ae4ac9bdf2f1784bf1d95b7be988ee52dd1ac060b99c36452e8e4b2665498
-
SHA512
b284fec239ef3f6178bd193f69dad7a05b52f09916970c734019c922ac6ed8d9cab2b956ba5b44e7408c8e189e3e2f8f802480c4d1265466984d70303bcc8f4b
-
SSDEEP
49152:piIc+Sfbhf3OxIfBn2o/s/5ssVW8bp3sBu1piZBycVB8+IzBZJM:o+e/OxIfS5smxVcapYBycVB8+wZJM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e7b59eb7e3e3a8da2ccd70dc4a9c116_JaffaCakes118
Files
-
8e7b59eb7e3e3a8da2ccd70dc4a9c116_JaffaCakes118.exe windows:4 windows x86 arch:x86
37f3c6d71f39b7f63a0609753a3cff03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
HeapAlloc
GetCurrentProcess
HeapDestroy
CreateFileA
user32
SetWindowLongA
wsprintfA
CharLowerBuffA
CreateWindowExA
advapi32
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegQueryValueA
ole32
CoCreateInstanceEx
CoCreateInstance
CoInitializeEx
Sections
.text Size: 1.9MB - Virtual size: 142.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE