Static task
static1
Behavioral task
behavioral1
Sample
fa18603301954d03d73c69efb76b59fd_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fa18603301954d03d73c69efb76b59fd_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa18603301954d03d73c69efb76b59fd_JaffaCakes118
-
Size
52KB
-
MD5
fa18603301954d03d73c69efb76b59fd
-
SHA1
5850b0506e9446e7ef8ed32015d25e7540eddb58
-
SHA256
4c655f9708839ca495b6fd86c06bb2d6cb76349deb2fc007d495066695481513
-
SHA512
5b9f12afe9ef0a174e8113ac4294cb253619c416df7cfb9b2b8aa8ff1ae6d49cc41722963c8c775b1b53d2fa60095e0d9ff9a34cd2c4c1074452e2b24dceca5c
-
SSDEEP
768:3tELoAseEpiW6fv9C9gk/XUZ/PlvLD4fzlUS2POd6DjyWzLojoIBvfbUs:3819yiWsv49Nu/Pteld2PWajXgcKos
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa18603301954d03d73c69efb76b59fd_JaffaCakes118
Files
-
fa18603301954d03d73c69efb76b59fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
980700d015474493256bb9a1f433563f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
memset
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
sprintf
_snprintf
memcpy
malloc
strtok
strcmp
strcpy
free
srand
rand
_adjust_fdiv
strlen
ws2_32
socket
kernel32
TerminateProcess
OutputDebugStringW
FindResourceA
LoadResource
SizeofResource
LockResource
GetTickCount
GetModuleHandleA
GetProcAddress
GetStartupInfoA
Sleep
user32
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1002B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ