Static task
static1
Behavioral task
behavioral1
Sample
de2fb192af9f1d4f362e37b298361a72_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de2fb192af9f1d4f362e37b298361a72_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de2fb192af9f1d4f362e37b298361a72_JaffaCakes118
-
Size
48KB
-
MD5
de2fb192af9f1d4f362e37b298361a72
-
SHA1
0eeef704cade3bc24a223ab5bf50617752ead932
-
SHA256
c525a8d8cf13241b1b8ed79408ca4e610f63751ef3808e76a33b118c294da482
-
SHA512
44c9a953a79c9854700864a8eb062023e88f251298141ccd70bb2fd5c919cd490b8737074be7ca81b1a24109eced8962d4a72451493feab56f36137005be7a63
-
SSDEEP
768:BYZFhs8uAVst2SZH2GJ+xJau6mGLP/3uZR8D+GVhJ4TTckV:BCm8BsttZjLueL+UD+GhJ4TTt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de2fb192af9f1d4f362e37b298361a72_JaffaCakes118
Files
-
de2fb192af9f1d4f362e37b298361a72_JaffaCakes118.exe windows:5 windows x86 arch:x86
3eaaffe71039fc5607d1fd79a674b07f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptCreateHash
kernel32
GlobalUnlock
shlwapi
PathCombineW
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfW
wvnsprintfW
user32
CharLowerBuffA
DispatchMessageA
DrawIcon
EndDialog
GetCursorPos
GetIconInfo
GetWindowLongA
OpenWindowStationA
SetProcessWindowStation
SetThreadDesktop
Sections
.rapqv Size: 39KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.claneh Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bwj Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ