Static task
static1
Behavioral task
behavioral1
Sample
122e2710f2f43f7f69327bc1f04eade0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
122e2710f2f43f7f69327bc1f04eade0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
122e2710f2f43f7f69327bc1f04eade0_JaffaCakes118
-
Size
54KB
-
MD5
122e2710f2f43f7f69327bc1f04eade0
-
SHA1
083424e16624c2caef5bdecf01a1d7c40452d11b
-
SHA256
c0cb5f8dfff7d3cdaa6dd97e317e58e7204f905d1062dbb4f28476bb5fa9504e
-
SHA512
429383073c7650e1b3eb2c25cfd176f703949621e515a27f1e40c2983b23868ed3aacc95d997b978f576a63349488bd935be3fab40c9dce686825e59a120c25d
-
SSDEEP
768:S0xQDuF0uPRtvk4fvsRobliTBZE+gwmuEqL1yeQ9N5ZOgn4Cyj/v/4wcaoGeCYNg:S0xQCF0kvs4lB3jjYg5GToz08aCI+7v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 122e2710f2f43f7f69327bc1f04eade0_JaffaCakes118
Files
-
122e2710f2f43f7f69327bc1f04eade0_JaffaCakes118.exe windows:4 windows x86 arch:x86
cabb7d19751ebb785236a640209e89ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
SetFilePointer
CreateFileA
lstrcpyA
FreeResource
WriteFile
SizeofResource
LockResource
LoadResource
FindResourceA
ResumeThread
CreateProcessA
SetThreadPriority
CloseHandle
SetPriorityClass
GetCurrentProcess
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
DeleteFileA
DeviceIoControl
WaitForSingleObject
CopyFileA
GetTickCount
MoveFileExA
CreateMutexA
GetCurrentThread
lstrcmpiA
advapi32
RegOpenKeyExA
Sections
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ