Static task
static1
Behavioral task
behavioral1
Sample
08cc8b56f15c15f1e03fb5f8f52d8e69_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
08cc8b56f15c15f1e03fb5f8f52d8e69_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
08cc8b56f15c15f1e03fb5f8f52d8e69_JaffaCakes118
-
Size
166KB
-
MD5
08cc8b56f15c15f1e03fb5f8f52d8e69
-
SHA1
f8f7cf2e081fe4ce4406be9416697dd361d55c95
-
SHA256
f48e4f3e278ae5981e2c912233e96ff189ca60fc509a3cb14861e1fabbee4f3a
-
SHA512
23da148ea5e8891a4e8925ef6e3422acbdfc8ae9cad36d013badc2ff24f94f0abcef21afcee5e0fac13395ddd55e5371e5a50a9ca099d267ecc033d107d71b34
-
SSDEEP
3072:WU6R+99AipVRB9mQrrGtVu2TXrG/gpL0e49Bp2+Q+HS8:WlW9zbR3mOou2TbG4h4Bp2+V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08cc8b56f15c15f1e03fb5f8f52d8e69_JaffaCakes118
Files
-
08cc8b56f15c15f1e03fb5f8f52d8e69_JaffaCakes118.exe windows:4 windows x86 arch:x86
663d4300e2ecfb1bfc52dc908f03ba86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcsncmp
strcmp
time
kernel32
GetModuleHandleA
IsBadReadPtr
GlobalAlloc
GetACP
lstrlenW
ExitProcess
GetLastError
LoadLibraryExA
GetModuleHandleW
GetProcAddress
VirtualAlloc
LoadLibraryA
GetCommandLineA
ExitThread
GetCommandLineW
advapi32
RegQueryValueExA
RegEnumValueA
RegDeleteKeyA
RegOpenKeyA
shell32
SHGetFileInfoA
DragQueryFileA
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHFileOperationA
oleaut32
SysFreeString
SysAllocStringLen
RegisterTypeLib
SafeArrayPtrOfIndex
shlwapi
SHQueryValueExA
PathGetCharTypeA
SHGetValueA
SHDeleteKeyA
SHStrDupA
PathFileExistsA
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ