mini_installer_full.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d1fcabdbc6f4533666e4494f7940882d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1fcabdbc6f4533666e4494f7940882d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1fcabdbc6f4533666e4494f7940882d_JaffaCakes118
-
Size
11.3MB
-
MD5
d1fcabdbc6f4533666e4494f7940882d
-
SHA1
e4bdce0cb4a36f37b9480a63366c6d745f6aa178
-
SHA256
91ab2084fbd0d3e658a35ca36d7cd32a49a0393875370425794f32405fec8369
-
SHA512
156be0fa83498975b12eec6483f5012950216afd500a4514ad9e78e69e91d15f250b54133a3d197527171a07cf805e198a1d7676bfe1d84a62c40aedbf9890d9
-
SSDEEP
196608:+oLYhTEXavKsbmAxPil62Hx3C+Or15Lenor90o9cE83LdFki5mKb6/E:+okhTEK/bmY2KBLlSouH3nk0G/E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1fcabdbc6f4533666e4494f7940882d_JaffaCakes118
Files
-
d1fcabdbc6f4533666e4494f7940882d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c13c72fa1e908e738853535529fd4b78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shell32
CommandLineToArgvW
shlwapi
StrStrW
kernel32
lstrcmpiW
GetCommandLineW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
CopyFileW
DeleteFileW
GetLastError
EnumResourceNamesW
LocalFree
lstrlenW
GetModuleFileNameW
RemoveDirectoryW
CreateDirectoryW
GetLongPathNameW
GetTempFileNameW
GetTempPathW
ExitProcess
GetModuleHandleW
FindResourceW
SizeofResource
WriteFile
CreateFileW
LockResource
LoadResource
lstrcatW
advapi32
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23.4MB - Virtual size: 23.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ