Static task
static1
Behavioral task
behavioral1
Sample
de6aea9a52e963f437782118509041d2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
de6aea9a52e963f437782118509041d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de6aea9a52e963f437782118509041d2_JaffaCakes118
-
Size
372KB
-
MD5
de6aea9a52e963f437782118509041d2
-
SHA1
9557d7ae6b2f1d6e54bc954b20db1fe3683e55ee
-
SHA256
4120987e543a65ed1026b54b1044725b79b6ee89f21711eabda16c3b7b5c390c
-
SHA512
4be9f20d02c475323d0fab72d33627d019bb5300a4b3ed39d1b035b04601e9d41e2746044786122be74bfb85d08036328c51e0dae4a1fa5c45eb567cc75e7235
-
SSDEEP
6144:7q0M8OQAO5WSocVxgGcj/G+E6PYitW2We5JCqvIe+nFq:G0IEScVfb3cpU2R5G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de6aea9a52e963f437782118509041d2_JaffaCakes118
Files
-
de6aea9a52e963f437782118509041d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
abcb2b26b379bf59b94633f5ed2d499a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
ShellExecuteA
shlwapi
StrChrIA
StrStrA
kernel32
lstrcpyA
lstrcatA
WriteFile
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeLibrary
GetCurrentDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
LoadResource
LockResource
RtlZeroMemory
SizeofResource
Sleep
urlmon
CoInternetCompareUrl
comctl32
GetMUILanguage
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE