Static task
static1
Behavioral task
behavioral1
Sample
ab1dc7647bc99b8106d1c116cf1df9d7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ab1dc7647bc99b8106d1c116cf1df9d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab1dc7647bc99b8106d1c116cf1df9d7_JaffaCakes118
-
Size
809KB
-
MD5
ab1dc7647bc99b8106d1c116cf1df9d7
-
SHA1
c86e3dacde5814c606fb010b45763f58ae509770
-
SHA256
6d9bbf3bf77d8131b18c0939bfe2d1174394d1146868fd72326717e26ca453c0
-
SHA512
79d81eb64c2a194a50ef9f07674015f2cfba0a857f8c3ac9f19e18cc57c86a44aeab7b854fc5b2d640065756ccda7c7e4efed50327aa43eb6967ff2f3861dfc0
-
SSDEEP
12288:OYoqAO+mk0YgYmfOu2gcJko3CqyFDKWFZWFlnwk3zUVvaH2Sj/grahScwq6DO9Ao:O4Eml9L2gjlBnCntwp8iaERqGKjdcQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab1dc7647bc99b8106d1c116cf1df9d7_JaffaCakes118
Files
-
ab1dc7647bc99b8106d1c116cf1df9d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
cde0a219f8ff2e695c89dba0042b6865
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
WriteFile
ReadFile
SetFilePointer
CreateFileA
GetTickCount
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
Sleep
GetTempPathA
lstrlenA
shell32
ShellExecuteExA
ShellExecuteA
SHChangeNotify
Sections
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ