Static task
static1
Behavioral task
behavioral1
Sample
8efb587f9c52972a5784853e8e6ae7b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8efb587f9c52972a5784853e8e6ae7b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8efb587f9c52972a5784853e8e6ae7b5_JaffaCakes118
-
Size
610KB
-
MD5
8efb587f9c52972a5784853e8e6ae7b5
-
SHA1
647553a4f1f81498018d7e642b7b31077cfdf5e6
-
SHA256
e07cd4ca77437872715f85e8e3cc2c7325e24feb1637379c8e1ebc7cef1be50b
-
SHA512
f8b5f3d7fa9a3107104b4b72ee2fbdc559aa95fed35ae6e1c5ae7fd893d0e14a2497a3fd08a74b7458c51bee1354fbe316df0cf455d7e6dd662f46d943871527
-
SSDEEP
12288:l4Ktp9vk9ON1Eank0u4oWHeg7wW/kEpP3QigUhHxgbMurEdj:OOk9OSmegP//pvQiRhRQNw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8efb587f9c52972a5784853e8e6ae7b5_JaffaCakes118
Files
-
8efb587f9c52972a5784853e8e6ae7b5_JaffaCakes118.exe windows:5 windows x86 arch:x86
0e945adcba1cf1db92e1b7682b9696fb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
SetFileTime
FindClose
MultiByteToWideChar
GetUserDefaultUILanguage
SetFileAttributesW
SetLastError
GetCommandLineA
lstrcmpiA
CreateFileMappingW
MoveFileExW
GetModuleHandleA
lstrcpynW
HeapAlloc
GetTempPathW
OpenProcess
GetCurrentThread
EnterCriticalSection
CloseHandle
ReleaseMutex
WriteFile
HeapFree
lstrcatW
CreateProcessW
CopyFileW
FindFirstFileW
GetSystemTimeAsFileTime
GlobalLock
lstrlenA
DisconnectNamedPipe
user32
GetDlgItemTextA
FindWindowExW
DispatchMessageW
GetIconInfo
PeekMessageA
Sections
.xkfol Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsjsj Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wjyr Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ