Static task
static1
Behavioral task
behavioral1
Sample
78939b1a415c3e9b66d096689ab43f10_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
78939b1a415c3e9b66d096689ab43f10_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
78939b1a415c3e9b66d096689ab43f10_JaffaCakes118
-
Size
76KB
-
MD5
78939b1a415c3e9b66d096689ab43f10
-
SHA1
8288862c3028ff8b0df3aa61b93c579f292bbd8e
-
SHA256
ab2599f3e4516805fad2ba6c10cec651d971997a45f220968817aebe3a50112c
-
SHA512
66e6f74ee95317e4f3e605c8e35b2fb25c059b1b7b0473f30704df18e5cb8d37dcdb7e0b3cc76af21262470f0abdfb98a7cd9cf1eae056e2e6e103b626d27abf
-
SSDEEP
1536:O4BbX1fMEdlz4alrn0gBnfy0uYnHUyeZdiBa:dbXBrlz5lwgVzuYnHReZdiBa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78939b1a415c3e9b66d096689ab43f10_JaffaCakes118
Files
-
78939b1a415c3e9b66d096689ab43f10_JaffaCakes118.exe windows:4 windows x86 arch:x86
84f2245d666cfbb2fc398d197d44467b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mspdb60
?OpenValidate3@PDB@@SAHPBD0PAJQAD2PAK3PAPAU1@@Z
msvcrt
free
??2@YAPAXI@Z
_splitpath
_mbsinc
_ismbcspace
qsort
_mbsstr
sscanf
fgets
_mbscmp
_mbsnbcmp
_mbschr
??3@YAXPAX@Z
_mbslwr
strncmp
_mbspbrk
_mbsrchr
_snprintf
_mbsnbicmp
_strdup
getenv
_makepath
atoi
fgetc
ungetc
_fsopen
fclose
_mbsicmp
bsearch
fseek
fflush
fprintf
_iob
_vsnprintf
sprintf
printf
_fullpath
fwrite
perror
rename
_mbsncmp
malloc
realloc
strncpy
__dllonexit
_onexit
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
ftell
fread
_purecall
_ismbcdigit
exit
_mbctoupper
kernel32
GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleHandleA
GetFileAttributesA
GetModuleFileNameA
SearchPathA
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ