Static task
static1
Behavioral task
behavioral1
Sample
2834fdc10633e5b40df38fdf0b3e45aa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2834fdc10633e5b40df38fdf0b3e45aa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2834fdc10633e5b40df38fdf0b3e45aa_JaffaCakes118
-
Size
13KB
-
MD5
2834fdc10633e5b40df38fdf0b3e45aa
-
SHA1
3da5337b915b91f3bcb1facb408ab78e619d2bcf
-
SHA256
5626734069a356e3a7a0c3f03445d37be99338a21c57092279b31a12b106aa9b
-
SHA512
d7d767d92fd6fac4fb446f5757935c192e84bf3630fef7f10730eb574b6233e07862febee2e837707ef57e08eaf59f7b1703280d0a9d7f748c98c43a2837fc13
-
SSDEEP
384:ZW+VIanfsqS8RHSGR5ySIQuZ5YJ6fMO/PAzqH+u:ZWa1fnRH3vySILgJ6fMOgzTu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2834fdc10633e5b40df38fdf0b3e45aa_JaffaCakes118
Files
-
2834fdc10633e5b40df38fdf0b3e45aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbefde6aedafdeedd261ae3f3f0345ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
system
jgSYM7GJdO3Q
zO30EHVJpdPUO
Hw7GMDxYwoUi
y1ucehW5tDPGTQ
ITxDXNLBvQAKX
HMaYyyCUNO
nZS0kYGCk4qo3
EAofaGHfOLDUJCL
vrdZesSUekK
XQcWsGjls5Yf
WZPVZgMGzj
BwC6cIXwWZoCpz
sgOqQg
D4OBmefrhlaE
kernel32
ExitProcess
GetProcessHeap
lstrcpynA
lstrcpyA
lstrlenA
lstrcmpA
lstrcatA
GlobalFree
DeleteFileA
CloseHandle
GlobalReAlloc
ReadFile
CreateFileA
GlobalAlloc
CreateProcessA
GetTempPathA
Sleep
SystemTimeToFileTime
GetLocalTime
GetModuleFileNameA
HeapAlloc
GetModuleHandleA
GetCommandLineA
GetLastError
ReleaseMutex
CreateMutexA
GetLocaleInfoA
GetSystemDefaultLCID
GetVolumeInformationA
GetWindowsDirectoryA
user32
wsprintfA
WaitForInputIdle
CharUpperA
advapi32
RegCloseKey
RegOpenKeyA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE