Static task
static1
Behavioral task
behavioral1
Sample
c80533693ef892ec1e5646e79efe617e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c80533693ef892ec1e5646e79efe617e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c80533693ef892ec1e5646e79efe617e_JaffaCakes118
-
Size
88KB
-
MD5
c80533693ef892ec1e5646e79efe617e
-
SHA1
2ee3222c960450ef06dfea9cb6c69219e0ff25dc
-
SHA256
e8bff8ff65364f37ee1da974290be24a79fd2753fa3aa220f49c27518b0590ae
-
SHA512
2cf97ba30511cf353a3a3c8e70e6c213b5132d7decefb64323393251dea3f68704994d8144de0a83ae6d30ea9f5a9d68c4302f03b40884dae8aee7a1c77dee2e
-
SSDEEP
768:qY2O8gmk3n2lbmx1zVrK7SUyb3xv2iXjbc0B3M3ZiVQA0ouT9Biai:qY2tgmkNzJKWUy7ZhXj4kQtouT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c80533693ef892ec1e5646e79efe617e_JaffaCakes118
Files
-
c80533693ef892ec1e5646e79efe617e_JaffaCakes118.exe windows:4 windows x86 arch:x86
21d3365bbfb44b3d09ba4c589a073b84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
FreeResource
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
Process32Next
TerminateProcess
MultiByteToWideChar
Process32First
CreateToolhelp32Snapshot
GetTempPathA
GetLocalTime
ReadFile
FindClose
FindFirstFileA
ExitProcess
GetLastError
GetStartupInfoA
GetCurrentProcess
GetSystemDirectoryA
CreateDirectoryA
GetModuleFileNameA
CopyFileA
CreateProcessA
CreateThread
OpenProcess
Sleep
CompareStringW
CompareStringA
SetEnvironmentVariableA
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
GetSystemTime
GetModuleHandleA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
LCMapStringA
LCMapStringW
SetFilePointer
HeapAlloc
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
advapi32
RegCreateKeyExA
RegRestoreKeyA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ