Static task
static1
Behavioral task
behavioral1
Sample
b0866b6423ba28dcc2c78fe3f267b34b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b0866b6423ba28dcc2c78fe3f267b34b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0866b6423ba28dcc2c78fe3f267b34b_JaffaCakes118
-
Size
31KB
-
MD5
b0866b6423ba28dcc2c78fe3f267b34b
-
SHA1
17478c4d64a581998166ce1d282f613800195ee1
-
SHA256
14f66ee2c1e880168c634ac972bb1842d57389880280e518ce177b15c7b76180
-
SHA512
dcd87be33bfc2af2f570a33cb6c4e14ed2ffae9e7676ad603ac9105174420892d5f0d3d7928a8538ac525e31ee4a4c72a56f6b080436928f0a2daf7c86690863
-
SSDEEP
768:C4ME/8Od8yZPfXY0jiq9l47dP0swUM8UOFs0D/63sq3Uc2:C4hEqZn9iqvyN0XROhr63sH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0866b6423ba28dcc2c78fe3f267b34b_JaffaCakes118
Files
-
b0866b6423ba28dcc2c78fe3f267b34b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0ce82ba00d2f51a0aca2713ffe33076
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
OpenProcess
lstrcatA
CreateDirectoryA
lstrcmpiA
GetProcAddress
CopyFileA
SetFileAttributesA
VirtualAllocEx
CreateRemoteThread
Process32Next
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
CreateToolhelp32Snapshot
CloseHandle
LocalFree
WriteProcessMemory
DeleteFileA
Process32First
lstrlenA
LoadLibraryA
CreateFileA
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4juq4g73 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5w70kxgk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ