Static task
static1
Behavioral task
behavioral1
Sample
e7335c87af3b53aef1a19b43f2a452aa_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e7335c87af3b53aef1a19b43f2a452aa_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e7335c87af3b53aef1a19b43f2a452aa_JaffaCakes118
-
Size
151KB
-
MD5
e7335c87af3b53aef1a19b43f2a452aa
-
SHA1
28cc5e6f82dec545c1341f54c85c5b0216b610a1
-
SHA256
c18fd0986ec1a9dc19785c69d97214b3dd6b37c323499829020133e6a15a4515
-
SHA512
688b3d5ddbb84830134e39c89b6c39424e540d57253a67321da8577f71e85de56bc6ee5578639038e7bb765452c633a9eff4bd9735b7a6b9daece84c91471235
-
SSDEEP
3072:EeAC2OgVOKfhpZxAzEC++MfLM0k582SD1PEwG+W8MOfidZFA7:Ep/3xAz1QD1MwG9bM6Zy7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7335c87af3b53aef1a19b43f2a452aa_JaffaCakes118
Files
-
e7335c87af3b53aef1a19b43f2a452aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ