Static task
static1
Behavioral task
behavioral1
Sample
a8bcf85e25ea3d76654f185fab9189f2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8bcf85e25ea3d76654f185fab9189f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8bcf85e25ea3d76654f185fab9189f2_JaffaCakes118
-
Size
43KB
-
MD5
a8bcf85e25ea3d76654f185fab9189f2
-
SHA1
68a05ccc6269fa1adae78e3f9d4894b53cd35229
-
SHA256
0e4a4692ad8b981ecebaebbb55ebf48300aa770483d18bbd88b3bc443fbc2288
-
SHA512
0a43e6fcf9fcee8b19d6535bee82708145d9b681a74391898cd70fd7b1003a0185e77fd04861d6334ac880d09273572a74ba49307de621c8b3611e600063ca93
-
SSDEEP
768:jAUhYSR/1eSSCaGCP4W0vUHDXGzy/oJNJJwdS4gQ4VigDayzb83EeeGQqD4MTwS4:U6vdyB0vSDXlQJN157xayPpjCT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8bcf85e25ea3d76654f185fab9189f2_JaffaCakes118
Files
-
a8bcf85e25ea3d76654f185fab9189f2_JaffaCakes118.exe windows:5 windows x86 arch:x86
a37d84a34b4bd4a8e48bf08986584f0a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
lstrcmpiA
EnterCriticalSection
ExpandEnvironmentStringsW
GlobalLock
GetUserDefaultUILanguage
DisconnectNamedPipe
HeapAlloc
MultiByteToWideChar
CopyFileW
GetCurrentThread
UnmapViewOfFile
SetEvent
ReleaseMutex
lstrcatW
CreateProcessW
GetTimeZoneInformation
FlushFileBuffers
GetModuleFileNameA
OpenProcess
SetFileTime
CreateThread
FindClose
GetSystemTime
SetThreadPriority
SetFileAttributesW
HeapFree
SetLastError
GetCommandLineA
WriteFile
lstrcpynW
user32
CharLowerBuffA
GetMessageW
LoadCursorW
EndDialog
Sections
.stab Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tkjij Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pglaz Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ