Static task
static1
Behavioral task
behavioral1
Sample
cf5983c879b20c9d2592dd8646683096_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf5983c879b20c9d2592dd8646683096_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf5983c879b20c9d2592dd8646683096_JaffaCakes118
-
Size
11KB
-
MD5
cf5983c879b20c9d2592dd8646683096
-
SHA1
7e8e5b4e371539fa3edb585f52e3dd24ccf591b0
-
SHA256
98876b6e95db3c41c52cfb385b60b446a7484df343553fe668edb3b4e0340d94
-
SHA512
e2343c7343013da2b153af19d4a3ba26b732174d066dca7d080c3aba69bbdb8835451d159a51bde39abe670136a3b53b2cd193b7a640fd0f558473315466222b
-
SSDEEP
192:PZH+V+c/ezw8x5xYQjxoxg/C3PnzQrTWa:R+Ic/eUYTjxWgun+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf5983c879b20c9d2592dd8646683096_JaffaCakes118
Files
-
cf5983c879b20c9d2592dd8646683096_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ce1c934a07d4c9bb71b2333bb0350fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindResourResource
Resource
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetTempFileNameA
GetTempPathA
GlobalAlloc
LoadResource
CreateMutexA
ReleaseMutex
RtlMoveMemory
RtlZeroMemory
SetFilePointer
SizeofResource
WinExec
WriteFile
lstrcatA
lstrcmpiA
lstrlenA
CreateFileA
CopyFileA
LockResource
CloseHandle
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
advapi32
RegCreateKeyA
RegSetValueExA
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE