Static task
static1
Behavioral task
behavioral1
Sample
fd9d295da3a86e97b949427508102e46_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fd9d295da3a86e97b949427508102e46_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd9d295da3a86e97b949427508102e46_JaffaCakes118
-
Size
7KB
-
MD5
fd9d295da3a86e97b949427508102e46
-
SHA1
772c92549adea478f3cb16a1297484121797b9ce
-
SHA256
84511afb134b6657b84da5df580c53b2e2dfe36e2879dd116238169ff5b133ed
-
SHA512
982ca21303b1df2185ec1f5903277e847ccc53d12622d656579447fbbf80e257262274bb83ccd61b125a49b0af25c90cdb3924c3c594e9227a85442b13da39db
-
SSDEEP
96:N2m9Zhz4FHbs/Yo0xVIG2lRtv4HPF0jHu5nQEQ+0W:Em141Q/kxpIRtv4d+HuZRQ+0W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd9d295da3a86e97b949427508102e46_JaffaCakes118
Files
-
fd9d295da3a86e97b949427508102e46_JaffaCakes118.exe windows:1 windows x86 arch:x86
e236c0a742d410fc208ec0e01b5f2721
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExpandEnvironmentStringsA
FreeLibrary
GetCommandLineA
GetExitCodeThread
GetFileAttributesA
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemDirectoryA
CloseHandle
GetTempPathA
HeapAlloc
LoadLibraryA
CopyFileA
LocalAlloc
LocalFree
QueryPerformanceCounter
RtlUnwind
RtlZeroMemory
CreateFileA
SetFilePointer
VerLanguageNameA
WaitForSingleObject
WriteFile
CreateProcessA
CreateThread
user32
LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
RegisterClassA
CreateWindowExA
DefWindowProcA
advapi32
RegFlushKey
RegOpenKeyExA
RegSetValueExA
crtdll
__GetMainArgs
_sleep
exit
raise
signal
strchr
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 444B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE