Static task
static1
Behavioral task
behavioral1
Sample
a693da52b5b054d6d36c0ba7e8d6ba2d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a693da52b5b054d6d36c0ba7e8d6ba2d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a693da52b5b054d6d36c0ba7e8d6ba2d_JaffaCakes118
-
Size
87KB
-
MD5
a693da52b5b054d6d36c0ba7e8d6ba2d
-
SHA1
8c5d23bed71b2863afbf133482d9fbc8ebd0d693
-
SHA256
2d881e7ac2bb6b00590cce40705705f44c2e26530488475c56faf5d469ca496d
-
SHA512
1c0d49dad3e3774d99cae828a21760caf9ec4e26d30513b70f7cfc68eb2e50e13f0f543ea546f580346e41f69a0a060bf21014b968b38eaf45df17caf5c1bf3a
-
SSDEEP
1536:GP6KuSDNfPRzCD1+kk7Xqb5PYgpyoETURY1fE50sG+5q83D:muSDNfPlCB+kYef/3Y3Uz3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a693da52b5b054d6d36c0ba7e8d6ba2d_JaffaCakes118
Files
-
a693da52b5b054d6d36c0ba7e8d6ba2d_JaffaCakes118.exe windows:5 windows x86 arch:x86
a61ae1ea292974246591ca17b92c42e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUninitialize
OleInitialize
CoInitialize
CoCreateInstance
kernel32
SetUnhandledExceptionFilter
GetShortPathNameW
GetCommandLineA
SystemTimeToFileTime
DeleteFileA
GetDriveTypeA
TerminateProcess
WaitForMultipleObjects
DosDateTimeToFileTime
SetEvent
GetPrivateProfileIntW
Sleep
SetErrorMode
GetCurrentThreadId
HeapAlloc
CopyFileA
SetEnvironmentVariableA
SetLastError
CreateProcessA
EnumSystemCodePagesW
GetFileAttributesA
GetNumberFormatA
CreateFileA
SetFileTime
FindClose
FindNextFileA
GetModuleFileNameA
GetVersionExA
CreateThread
SetFileAttributesA
LocalFileTimeToFileTime
GetDiskFreeSpaceA
GetCurrentDirectoryA
HeapFree
ReadFile
VirtualQuery
GetProcAddress
SetFileAttributesA
FindFirstFileA
DeviceIoControl
QueryPerformanceCounter
GetEnvironmentVariableA
CreateEventW
ReleaseActCtx
FlushFileBuffers
GetSystemTime
GetProcessHeap
SwitchToThread
CloseHandle
SetVolumeLabelA
GetCurrentProcess
CopyFileExW
IsValidLanguageGroup
GetTickCount
LeaveCriticalSection
MoveFileExA
GetCurrentProcessId
WriteFile
GetFileSize
GetSystemDirectoryA
OpenEventA
SetEndOfFile
QueryDosDeviceA
GetSystemTimeAsFileTime
SetFilePointer
FormatMessageA
DeleteCriticalSection
GlobalFlags
GetThreadTimes
MoveFileA
EnterCriticalSection
GetExitCodeProcess
user32
GetKeyNameTextA
ShowWindow
ChangeDisplaySettingsA
MessageBoxA
comdlg32
PrintDlgA
GetSaveFileNameA
GetOpenFileNameW
GetSaveFileNameW
GetOpenFileNameA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eytu Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 129KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ