Static task
static1
Behavioral task
behavioral1
Sample
f317556849ff892d40df47bbf7820164_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f317556849ff892d40df47bbf7820164_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f317556849ff892d40df47bbf7820164_JaffaCakes118
-
Size
359KB
-
MD5
f317556849ff892d40df47bbf7820164
-
SHA1
aa8a77b71556e5391eb04d5a1b63c1cba755c372
-
SHA256
0ec68b97e9f9e01d6505c2744b6aad1888636f0a0a72db1b78ca7fbb3b14ffc4
-
SHA512
1bc046dd69e539b98582aebf0c369987bc6cf27249f28483090e25df05e6dba0ad4d2f9f95b34adc74d487f4f3274bd28c7ab7339e53586ed04ab0fba59e7b1d
-
SSDEEP
6144:s5c7G22OxGaXeGFdQTvZ433hwDU45ihRU4y9vxvUYIE3sapOj3fcHay93oDEN+3c:Eenh4U45ih64UvxvvIXakj0HayK2MPkj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f317556849ff892d40df47bbf7820164_JaffaCakes118
Files
-
f317556849ff892d40df47bbf7820164_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 14KB - Virtual size:
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE