Static task
static1
Behavioral task
behavioral1
Sample
8e96a5d1be70b9c6fe074e36c18d9fea_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e96a5d1be70b9c6fe074e36c18d9fea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e96a5d1be70b9c6fe074e36c18d9fea_JaffaCakes118
-
Size
27KB
-
MD5
8e96a5d1be70b9c6fe074e36c18d9fea
-
SHA1
684ec2f8e652dfa20965bcfcfcd17059dcce54f2
-
SHA256
69712e6173211016436fe494a9eec59cb43f1a08e93968c6cb83c4f4732a7054
-
SHA512
918c6f20f92e43c6994287e24f8c7f578e19399cfc9f07707269daef244959dd1be764c66cb0923e9bb9bbba1a265c5ce88f1728bc125742e0ddc5cf2d1f820f
-
SSDEEP
384:VfmEmThW8yXyjBMIr/LPOK0VRKwKyMNjRRVaOrACS:ZqTE8yiVMw/LPO7XK4wjRRVwC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e96a5d1be70b9c6fe074e36c18d9fea_JaffaCakes118
Files
-
8e96a5d1be70b9c6fe074e36c18d9fea_JaffaCakes118.exe windows:4 windows x86 arch:x86
012ea0948030878dfb868b93e456ea1a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
DeleteFileA
CloseHandle
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
ExitThread
HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
lstrcatA
GetCommandLineA
WinExec
SetFileAttributesW
SetEvent
CreateThread
CreateProcessA
WaitForSingleObjectEx
WriteFileEx
LoadResource
FindResourceA
CompareStringA
Process32First
CreateToolhelp32Snapshot
lstrlenA
lstrcmpA
WaitForMultipleObjects
ResetEvent
CreateEventA
Sleep
WaitForSingleObject
FreeLibrary
GetModuleHandleA
CreateFileA
RtlUnwind
user32
PeekMessageA
MsgWaitForMultipleObjects
CreateWindowExA
EndPaint
ShowWindow
AnyPopup
TranslateMessage
DestroyWindow
wsprintfA
DispatchMessageA
advapi32
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegNotifyChangeKeyValue
ole32
CoInitialize
CoUninitialize
gdi32
RestoreDC
shell32
SHGetFolderPathA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ