Static task
static1
Behavioral task
behavioral1
Sample
a5914a0e531955d87860f8123467487b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5914a0e531955d87860f8123467487b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5914a0e531955d87860f8123467487b_JaffaCakes118
-
Size
616KB
-
MD5
a5914a0e531955d87860f8123467487b
-
SHA1
3e597d3bf44d9218d490d2514a11062d72a85769
-
SHA256
496c26220e78bc665b55457d68b250e5331464bdab19df7b991ca9f79c203ba4
-
SHA512
e4d52d510f54828f82b2a0f18348a662ce75cd418e92d46b92923269584d5d7ce9d8e430e17023fad9b8cce86f8539c7627662541058f1d89053ad9d9d5dbc20
-
SSDEEP
12288:wg6R9+8NmVD6NTsJcoCDVJeWssWnJ36e4lRGaLBV5F9Bqmo2:8OVD6NTbooVJexsWn5URZBrFGm1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5914a0e531955d87860f8123467487b_JaffaCakes118
Files
-
a5914a0e531955d87860f8123467487b_JaffaCakes118.exe windows:5 windows x86 arch:x86
c0e6ead99976119aeed13095eb77e762
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
shlwapi
PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
wnsprintfA
wnsprintfW
user32
CharUpperW
CloseDesktop
DispatchMessageA
FindWindowExA
GetClipboardData
GetIconInfo
GetKeyState
GetMessageA
GetWindowLongA
GetWindowTextA
GetWindowThreadProcessId
OpenWindowStationA
Sections
.wxgdcz Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.finur Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hel Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ