Static task
static1
Behavioral task
behavioral1
Sample
a8b7a5e644318f1ee52e8dae426a8b34_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8b7a5e644318f1ee52e8dae426a8b34_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8b7a5e644318f1ee52e8dae426a8b34_JaffaCakes118
-
Size
32KB
-
MD5
a8b7a5e644318f1ee52e8dae426a8b34
-
SHA1
6755366650429a07023cb739596cb812aa0303cf
-
SHA256
4aee9b48dff973856e96e56c82b99fbb246e6388f449d13fa262a0065a6e609a
-
SHA512
799fae1e348b084d7ed40eec10c5812915cdcfd7d52a4a2d43c5510c6949925699648549d80b28b96314d36deb930c6b588544885e0fea0b862de1464d2bfd87
-
SSDEEP
768:62s0Job43tK10Yq5PkY2/KxTQ7kdzYGOKV29q:62suobSKKPkYSK5d8GOKV9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8b7a5e644318f1ee52e8dae426a8b34_JaffaCakes118
Files
-
a8b7a5e644318f1ee52e8dae426a8b34_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca3152e8869bb07be0b6e8e6ffda82e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CreateEventA
GetModuleHandleA
GetProcAddress
CreateFileA
WaitForSingleObject
Sleep
CloseHandle
DeleteFileA
ExitThread
GetModuleFileNameA
lstrcpyA
lstrcatA
PulseEvent
GetProcessHeap
HeapAlloc
HeapFree
ExitProcess
GetCommandLineA
SetEvent
WriteFile
CreateThread
lstrcmpA
lstrlenA
ResetEvent
WaitForMultipleObjects
FindResourceA
LoadResource
Process32First
CreateToolhelp32Snapshot
CompareStringA
FreeLibrary
user32
MsgWaitForMultipleObjects
DestroyWindow
DispatchMessageA
TranslateMessage
CreateWindowExA
BeginPaint
PeekMessageA
wsprintfA
GetForegroundWindow
ShowWindow
AnyPopup
advapi32
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegNotifyChangeKeyValue
ole32
CoUninitialize
CoInitialize
shell32
SHGetFolderPathA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ