Static task
static1
Behavioral task
behavioral1
Sample
fc3beb5913bd41832a22648b423d1c57_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
fc3beb5913bd41832a22648b423d1c57_JaffaCakes118
-
Size
350KB
-
MD5
fc3beb5913bd41832a22648b423d1c57
-
SHA1
c782c51c49d6effc90351d231b2b5b3bbded1668
-
SHA256
9073565b97d0c96e69e4999b624bfb8ce78f6d0ba338dc373d34154a37f7adcd
-
SHA512
f605a68d510e8c8c2ecd93b7dcfbc160b71d5cae0bd970d12846fc170f15b31b95f20501e1b72ffc37ed626490fb73bde697607590ebdfe2a3b80ba7f863ebd7
-
SSDEEP
6144:pEO6Q+bfo94w33PWE0s/gfVQbmLSQFG7bTOSmo6aIoGpCZOQM8z:pV63Vw33h4YmLFkoh2uCvM8z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc3beb5913bd41832a22648b423d1c57_JaffaCakes118
Files
-
fc3beb5913bd41832a22648b423d1c57_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE