Static task
static1
Behavioral task
behavioral1
Sample
b91d25234a9d7c184a64e0785e2357e7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b91d25234a9d7c184a64e0785e2357e7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b91d25234a9d7c184a64e0785e2357e7_JaffaCakes118
-
Size
8KB
-
MD5
b91d25234a9d7c184a64e0785e2357e7
-
SHA1
bd18831c0b662c8b428dbe7cb97692778338cdc3
-
SHA256
f69ace02a5db085a348bd8a33b4cfc9e957b2ebf4e1faa0822197a42ca616af7
-
SHA512
9dd06de72f2f4e2ee80de7080143765bbd26f97bab0620d6e0c45dd51eca832ed78347407eeb76418cddee8ac2fcf871a4a6b06505c3aa621aedf62b2a560d1b
-
SSDEEP
192:shYrYL0WpAtIYwXJF2kI0cCfcyLbC+sJqPwWj1X/r+LbU4QI5Pfl61:shYkwWOuYwXL2l0FfcwyqYWj1vl4bl2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b91d25234a9d7c184a64e0785e2357e7_JaffaCakes118
Files
-
b91d25234a9d7c184a64e0785e2357e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
6d406afc1dac34b31b5a5e6554445549
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
DeleteFileA
GetTickCount
GetTempPathA
GetProcAddress
CopyFileA
CreateDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
Sleep
WinExec
lstrcatA
lstrlenA
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
msvcrt
fopen
sprintf
fclose
Sections
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE