Static task
static1
Behavioral task
behavioral1
Sample
041c8536e0a6b284e6846ee1311cbe87_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
041c8536e0a6b284e6846ee1311cbe87_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
041c8536e0a6b284e6846ee1311cbe87_JaffaCakes118
-
Size
24KB
-
MD5
041c8536e0a6b284e6846ee1311cbe87
-
SHA1
5faac09f8765fe882bc781cb6c2bc27e7314bc77
-
SHA256
e71f16dc4f8acd67a7e59d7b5e776340f1075737686f6474077d789644c123cd
-
SHA512
b673a5572bee948c93ddfe70252beedc406f3af64f2722a5c2c67254b94c8c469d972c38c1fa00a68519a7d91bd37366854c64d45600da047d29d38e68a0b9a0
-
SSDEEP
384:PBoSYAMTjMvXFvvOo+UvtSvlnbw/HuR21XjA:PBoSYRTj2VvvOo+UvtSvlnk/HueT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 041c8536e0a6b284e6846ee1311cbe87_JaffaCakes118
Files
-
041c8536e0a6b284e6846ee1311cbe87_JaffaCakes118.exe windows:4 windows x86 arch:x86
78c577d6fc7703e834bde6b059830e2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
CloseHandle
CreateProcessA
MoveFileA
DeleteFileA
WriteFile
CreateFileA
Sleep
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
FreeLibrary
GetModuleHandleA
GetStartupInfoA
msvcrt
isspace
ispunct
isprint
islower
isgraph
isdigit
isalpha
isalnum
div
ceil
isupper
rand
srand
time
__CxxFrameHandler
_access
_except_handler3
??3@YAXPAX@Z
??2@YAPAXI@Z
atol
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
isxdigit
sprintf
_itoa
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ