Static task
static1
Behavioral task
behavioral1
Sample
54a1935614acf01af3012e054a6c3c66_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
54a1935614acf01af3012e054a6c3c66_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
54a1935614acf01af3012e054a6c3c66_JaffaCakes118
-
Size
8KB
-
MD5
54a1935614acf01af3012e054a6c3c66
-
SHA1
0575d7b11ff41110575dca5de6ef6813397d8a33
-
SHA256
d1f29d6419bf77c04c44fca6ee7a7f1ae8f20fe5a44fe80fa307a9b4a96dddab
-
SHA512
0601df1ed1b224e2537d108bd2bc05850ce59b78f987775d2bee68f04466281c52372568d3e7ff4e30c22e291893087f809b2311fcff5c1db02827f41c6d1586
-
SSDEEP
192:XQ3DEDzshIlTVhtrswXb7KV5dsUYGEGTDBW7le:gTEDzsWZVIV5dJ+ItW7l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54a1935614acf01af3012e054a6c3c66_JaffaCakes118
Files
-
54a1935614acf01af3012e054a6c3c66_JaffaCakes118.exe windows:4 windows x86 arch:x86
b0359257853ecb4c9fbd38a625715066
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
WinExec
GetCurrentThreadId
GetTickCount
GetTempPathA
CreateThread
lstrcpyA
GetPrivateProfileStringA
CopyFileA
DeleteFileA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
VirtualProtectEx
GetCurrentProcess
GetLastError
CreateMutexA
GetCommandLineA
LoadLibraryA
GetProcAddress
Sleep
GetVolumeInformationA
CreateDirectoryA
lstrlenA
advapi32
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
msvcrt
fopen
sprintf
malloc
strstr
_strlwr
fclose
Sections
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE