Static task
static1
Behavioral task
behavioral1
Sample
b8f5cd6307a4c7297bee582a907cfb2f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b8f5cd6307a4c7297bee582a907cfb2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8f5cd6307a4c7297bee582a907cfb2f_JaffaCakes118
-
Size
16KB
-
MD5
b8f5cd6307a4c7297bee582a907cfb2f
-
SHA1
a708bc1a72e2652641f9697a7f45aa30785ff960
-
SHA256
49348b5fc9df6d3ae70cf5ef325836c0cb488655f32fcc06af9834a8f0a64c94
-
SHA512
389ce9440d309e5d08dec5ea1e787aa3da5526054b571b9958433a204b086ca8caa1b26c6fc82ea1e3b350506416507c38172467a7209e580c7d8c493f0fefe6
-
SSDEEP
192:85nxrhNm2P1qhRAJ0qDbHQiIM+Fp/Q0FpYD1:ONm2dqU0qD7QisFNFpYD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8f5cd6307a4c7297bee582a907cfb2f_JaffaCakes118
Files
-
b8f5cd6307a4c7297bee582a907cfb2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
9772a771b43682ab3e567b676cf5182c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
FreeLibrary
GetProcAddress
LoadLibraryExA
lstrcmpiA
DeleteFileA
SetFileAttributesA
lstrcatA
GetStartupInfoA
ExitProcess
CloseHandle
GetModuleHandleA
lstrcpyA
GetLastError
SetLastError
GetSystemDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
GetDriveTypeA
GetUserDefaultLangID
lstrcpynA
lstrlenA
CreateDirectoryA
EnumResourceNamesA
SetCurrentDirectoryA
GetCommandLineA
RemoveDirectoryA
user32
CharNextA
LoadStringA
wsprintfA
MessageBoxA
advapi32
RegOpenKeyExA
RegCloseKey
RegFlushKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
ole32
CoInitialize
CoUninitialize
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ