Static task
static1
Behavioral task
behavioral1
Sample
d45fab86e9f91466c269b66080813a02_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d45fab86e9f91466c269b66080813a02_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d45fab86e9f91466c269b66080813a02_JaffaCakes118
-
Size
14KB
-
MD5
d45fab86e9f91466c269b66080813a02
-
SHA1
9ece59442da9b82be9d85d7a06b2b904fb2f73d1
-
SHA256
156d43ff0c7d008ad2ad9cfbd965a44db3cc56e03cc1c9cd0a85ac46464898db
-
SHA512
999e7743d2b66b54ba37f5130e67af09f928988cb042ff0396510e5c8ed8f387e23712858e2fbc5a0ef374f7eb67d69ee7b9bce7a5ec4a8f91e28bd0fab3539b
-
SSDEEP
384:9Sd3ytvl5FuiLOlqJniL+5VKlKtqYthDYAZm:9xvfFhnnZzhDYAZm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d45fab86e9f91466c269b66080813a02_JaffaCakes118
Files
-
d45fab86e9f91466c269b66080813a02_JaffaCakes118.exe windows:4 windows x86 arch:x86
dbdefd2bd21e50ebda11d3f07c9ab6c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RaiseException
GetProcAddress
FreeLibrary
LoadLibraryA
ExitProcess
CreateProcessA
lstrcat
lstrcpy
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
GetLastError
CreateMutexA
Sleep
GetEnvironmentVariableA
GetCommandLineA
lstrlen
lstrcmpi
CreateDirectoryA
CopyFileA
CreateFileA
WriteFile
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
SetFilePointer
DeleteFileA
CloseHandle
ReadFile
Sections
.text Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE