Static task
static1
Behavioral task
behavioral1
Sample
cdddd2c7f0db957bbb7460b2f675444b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cdddd2c7f0db957bbb7460b2f675444b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cdddd2c7f0db957bbb7460b2f675444b_JaffaCakes118
-
Size
18KB
-
MD5
cdddd2c7f0db957bbb7460b2f675444b
-
SHA1
bf67bff466a0909eae41746fa7fa1e31af30e4a1
-
SHA256
9ee7f9b72f8126e64a5203de1d5924ad96293749cf4fd6762885f63d527aa590
-
SHA512
36a23cee5082de231757d5e6ce509f9103986932098a4bd16c9ad442bfe6418d057b0c6d04d565695bd57611395ff8c3f2ad90e94d93977876336587542fc275
-
SSDEEP
384:U0Ycs/HphDKtTlAtj/TheWjK98kKQul0szto:Uzcs/HpQtWsidl0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdddd2c7f0db957bbb7460b2f675444b_JaffaCakes118
Files
-
cdddd2c7f0db957bbb7460b2f675444b_JaffaCakes118.exe windows:4 windows x86 arch:x86
fd8567b5239f6e44cf610e4913880d3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
SetEvent
GetModuleFileNameA
GetModuleHandleA
CloseHandle
lstrcpyA
lstrlenA
SetFilePointer
LoadLibraryA
RtlUnwind
ExitProcess
CreateThread
WaitForSingleObject
GetVersionExA
WriteFile
ExitThread
GetTempPathA
CreateFileA
user32
wsprintfA
BeginPaint
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
ShowWindow
CreateWindowExA
SetThreadDesktop
CreateDesktopA
CharToOemA
GetDesktopWindow
IsWindow
CloseWindow
Sections
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ