Static task
static1
Behavioral task
behavioral1
Sample
bba2eeb4c8e9fa66ed1a614c87a791ac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bba2eeb4c8e9fa66ed1a614c87a791ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bba2eeb4c8e9fa66ed1a614c87a791ac_JaffaCakes118
-
Size
334KB
-
MD5
bba2eeb4c8e9fa66ed1a614c87a791ac
-
SHA1
3ced25f38ec50ca97ca2b871c4f89e22204171a8
-
SHA256
c0918d8875d29fc179cf6bae53ab20d28905c753159b4f73f38c6c5649e7991b
-
SHA512
8fddf91bf211f7e8704ad98c046041955fbb2ac975084298e777e7c8041fb4a9af2e8d0e18558641f10dc37417b88e83fb2bbafacfab3815d9231aeb39a350db
-
SSDEEP
6144:klHo2d1w2WBeWjFe+5Nn3Z7xcg4s+7Q8wkl2B5XqSCVqRyUuHD2e:1Fee0+5p3Z7x3tWvu5Xqb3UuSe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bba2eeb4c8e9fa66ed1a614c87a791ac_JaffaCakes118
Files
-
bba2eeb4c8e9fa66ed1a614c87a791ac_JaffaCakes118.exe windows:5 windows x86 arch:x86
d95eaa087ef4380de778b92e3303113c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCmpNIA
PathFindFileNameW
PathFileExistsW
SHDeleteKeyA
wvnsprintfA
wnsprintfW
PathMatchSpecW
wnsprintfA
wvnsprintfW
kernel32
WaitForSingleObject
advapi32
RegEnumKeyExA
RegCreateKeyExA
RegCloseKey
DuplicateTokenEx
RegSetValueExA
RegQueryValueExA
CryptReleaseContext
RegDeleteValueA
CryptDestroyHash
CryptAcquireContextW
GetUserNameW
Sections
.vwxaf Size: 41KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.psvwp Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qtoj Size: 6KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ