Static task
static1
Behavioral task
behavioral1
Sample
f6d3edd2555dc8096cb70315761f6ccf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6d3edd2555dc8096cb70315761f6ccf_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6d3edd2555dc8096cb70315761f6ccf_JaffaCakes118
-
Size
119KB
-
MD5
f6d3edd2555dc8096cb70315761f6ccf
-
SHA1
53a0ecff1ea97b402767ca17d85717b7ae52a64e
-
SHA256
c267dd8662e0ef93e0e2f38a78ab1ef684495e290e90cff6d8499aeb41be03e2
-
SHA512
820d2655c8d6f0b187739ae2491b4fdd860bb061e80b6610f8ba64f93c725640f695af123151b573db637da942be25ba05c40c3a21982950288e6e8561bf3676
-
SSDEEP
3072:APDZUnsqMyPslXrGxVIYueNBs4QuLNg20oDziXC8whZHMLf:LnvvPspGxVIYuaDQuLK20oDOSFhy7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6d3edd2555dc8096cb70315761f6ccf_JaffaCakes118
Files
-
f6d3edd2555dc8096cb70315761f6ccf_JaffaCakes118.exe windows:1 windows x86 arch:x86
8c9615faf03e1ec0dccc0042a8b7e5e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleA
GetCPInfo
lstrcpynW
GetLastError
Sleep
TerminateProcess
GetTimeFormatW
WriteFile
GetStartupInfoA
GetCommandLineW
GetStartupInfoA
GetLocalTime
GetCommandLineW
MulDiv
GetLastError
ReadFile
WriteFile
GetTimeFormatW
GetCPInfo
TerminateProcess
GetLastError
GetStartupInfoA
GetFileSize
ReadFile
GetStartupInfoA
GetLastError
GetLocalTime
GetLocalTime
lstrcmpW
GetTimeFormatW
GetFileSize
lstrcmpW
lstrcmpW
GetStartupInfoA
GetLastError
lstrcpynW
GetStartupInfoA
GetTimeFormatW
GetDateFormatW
Sections
.text Size: 74KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.test1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.test3 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.reloc Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 802B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ