Static task
static1
Behavioral task
behavioral1
Sample
be88fb22b3dfaa9601d14adb5efbc441_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
be88fb22b3dfaa9601d14adb5efbc441_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be88fb22b3dfaa9601d14adb5efbc441_JaffaCakes118
-
Size
58KB
-
MD5
be88fb22b3dfaa9601d14adb5efbc441
-
SHA1
1de79308b4912a32c9cfb128ef415b89c1e26c0f
-
SHA256
0ad1644d5d9d83696ae4aa864acfe5b68842743a1481fcceeb96994de111d709
-
SHA512
8e1d99c3efd6c815d060171d85f01589c93cc863f4abc9516abaa2aec062311eedc8050aeea78450fa9b904ece82d140923be59380df2846da82dd4d7f50efe3
-
SSDEEP
768:eW75/x8Rutc1GpfonYY4klQKcZd/naF7nRFbELB55p84V2JdQdUvBHQ7qBdhH:j75CRuoGkYY4PZd/aFtNC7m+SQdU91H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be88fb22b3dfaa9601d14adb5efbc441_JaffaCakes118
Files
-
be88fb22b3dfaa9601d14adb5efbc441_JaffaCakes118.exe windows:5 windows x86 arch:x86
9dbf2d86ccd10060b9323dd8da778b63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptDestroyHash
CryptHashData
RegCreateKeyExA
RegSetValueExA
shlwapi
PathCombineW
PathFileExistsW
PathFindFileNameW
StrCmpNIA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CloseWindowStation
ExitWindowsEx
FindWindowExA
GetClassNameA
GetDlgItemTextA
GetForegroundWindow
GetMenuItemID
GetWindowLongA
PeekMessageA
Sections
.xah Size: 48KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ihap Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gpcnqh Size: 6KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ