Static task
static1
Behavioral task
behavioral1
Sample
a8b9ab1faa8e0067ec6c0b671e30d81a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8b9ab1faa8e0067ec6c0b671e30d81a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8b9ab1faa8e0067ec6c0b671e30d81a_JaffaCakes118
-
Size
97KB
-
MD5
a8b9ab1faa8e0067ec6c0b671e30d81a
-
SHA1
358697423164f0665062cfd8588f6d6818b6fcc9
-
SHA256
316a279cccef13ddc81ced5ff4ca59087e880dd932cbf6994394c5c24df74fbf
-
SHA512
2ad7ebb0040f18c8effd38c4d7c7895464ba0fd1338bdf114f87cbea0c66eaf3648e2bbd52d81ef4ff82414b3bd90076d050665490c82f92aadd35f4284120a5
-
SSDEEP
1536:aPe71o53lTUy7uhjyMPuuuGCARUVnTG6j+8cWdb0z4P0CkUmy33i6vZ:aPe5o5VTyhjyMPuuuGdUxj+DWdFD3RvZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8b9ab1faa8e0067ec6c0b671e30d81a_JaffaCakes118
Files
-
a8b9ab1faa8e0067ec6c0b671e30d81a_JaffaCakes118.exe windows:4 windows x86 arch:x86
e489ec8e364f2703ba25418ca149c57a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
lstrlenA
RemoveDirectoryA
SetLastError
GetStartupInfoA
IsDebuggerPresent
GetModuleHandleW
DeleteFileW
lstrlenW
lstrcmpA
GetModuleHandleA
GetVersion
GlobalFindAtomA
GetCurrentProcessId
GlobalFindAtomW
GetOEMCP
GetThreadLocale
GetLastError
CopyFileA
GetACP
QueryPerformanceCounter
GetCurrentProcess
GetDriveTypeA
GetUserDefaultLangID
MulDiv
lstrcmpiW
GetCurrentThreadId
LoadLibraryW
GetProcessHeap
GetConsoleOutputCP
GetCommandLineA
GetWindowsDirectoryA
SetCurrentDirectoryA
GetCommandLineW
DeleteFileA
GetTickCount
Sleep
lstrcmpiA
VirtualAlloc
user32
GetDC
GetDesktopWindow
GetSystemMetrics
CharNextA
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ