Static task
static1
Behavioral task
behavioral1
Sample
b8886bcd10552270300bf1c52639f631_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b8886bcd10552270300bf1c52639f631_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8886bcd10552270300bf1c52639f631_JaffaCakes118
-
Size
50KB
-
MD5
b8886bcd10552270300bf1c52639f631
-
SHA1
0d469b3139b01efcf3c9723eab309d75d092ac87
-
SHA256
bd9e2d2f76802d4469612706737e1b4720b8c40e5e276c5ee8376a704b9b91d6
-
SHA512
14a863d29e9e98539ecf4f1e885aaae88a8d9e2762166d3d8fcef18dd9f85f9071661bbe502283c4a2f09f8bdb21be27a910b8c1652317a23cb09c838ca927ba
-
SSDEEP
384:i/4EAYY1bgqCXMNeLNek+vDV5giEyV/XxdaEDc8AIlT3y6iIEQUOFgji:q41Lr0yRR3T34IEogj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8886bcd10552270300bf1c52639f631_JaffaCakes118
Files
-
b8886bcd10552270300bf1c52639f631_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c0f2d318bbe9b8bb9dd527b2f796b77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetComputerNameA
LoadLibraryExW
GetCommandLineA
GetExitCodeProcess
FindClose
TlsGetValue
CreateMutexA
GetTickCount
GetLastError
Sleep
EnumResourceTypesA
ReleaseMutex
GetDriveTypeA
FreeConsole
VirtualProtect
DeleteCriticalSection
GetModuleHandleA
SetLastError
GetDiskFreeSpaceExW
shell32
SHGetSettings
SHGetMalloc
DragFinish
SHFree
DllUnregisterServer
ExtractIconA
DuplicateIcon
DragQueryFileA
ShellMessageBoxA
SHGetDiskFreeSpaceA
DragAcceptFiles
StrChrA
ShellAboutA
printui
vPrinterPropPages
bPrinterSetup
bFolderGetPrinter
PnPInterface
vQueueCreate
user32
MessageBoxA
Sections
.text Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
myxffuy Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE