Static task
static1
Behavioral task
behavioral1
Sample
ff8069e9df5f033f25ed3cae4c44d26d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ff8069e9df5f033f25ed3cae4c44d26d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
ff8069e9df5f033f25ed3cae4c44d26d_JaffaCakes118
-
Size
169KB
-
MD5
ff8069e9df5f033f25ed3cae4c44d26d
-
SHA1
c16b25ad819057d8c7d6e1aafb9b00506cd32fe0
-
SHA256
bb81c43ac789ba1ff6323f2ae93c619012de472adcadb255e139d277acec0d78
-
SHA512
b50c454980208fbce74b7a8d085ecbb59d83f90b0556dc1d328d9df186a1c2631c4a8fd3b0afb616a7cb0f11801acf784e384fea89ba82fce7b8a774fc7122f8
-
SSDEEP
3072:qlnLPV0bgNVZ7lZimggJ57lyrEquWN5tQ57ziAx5ClB:qlh0MimB5IELSGOw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff8069e9df5f033f25ed3cae4c44d26d_JaffaCakes118
Files
-
ff8069e9df5f033f25ed3cae4c44d26d_JaffaCakes118.exe windows:4 windows x86 arch:x86
55dd31bf44ae1e8d52c0271ddd5140c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetClassLongA
MessageBoxW
rpcrt4
UuidCreate
shell32
SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW
kernel32
UnhandledExceptionFilter
InterlockedIncrement
GetFullPathNameW
HeapSize
GetThreadPriority
Sleep
CreateFileA
GetCurrentThreadId
GetCurrentDirectoryW
LeaveCriticalSection
WriteConsoleA
WriteFile
SetUnhandledExceptionFilter
GetModuleFileNameW
IsDebuggerPresent
RaiseException
SetCommConfig
MultiByteToWideChar
TerminateProcess
LCMapStringW
WideCharToMultiByte
HeapReAlloc
EnumResourceNamesA
WriteConsoleW
ExitProcess
HeapFree
GetUserDefaultLCID
GetCommandLineA
EnterCriticalSection
GetCurrentProcess
GetLocaleInfoW
CloseHandle
HeapAlloc
DeleteCriticalSection
GlobalAlloc
IsValidCodePage
SetStdHandle
GetLastError
ExitProcess
GetConsoleOutputCP
GetCPInfo
GetProcAddress
SetEndOfFile
RtlUnwind
InitializeCriticalSection
GetVersionExA
EnumSystemLocalesA
IsValidLocale
GetModuleHandleA
ReadFile
InterlockedDecrement
LCMapStringA
GetProcessHeap
GetFullPathNameA
advapi32
RegCloseKey
RegCreateKeyExW
RegSetValueExW
Sections
.text Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ