Static task
static1
Behavioral task
behavioral1
Sample
0743bf22194e0547f0fb895f81f75a2c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0743bf22194e0547f0fb895f81f75a2c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0743bf22194e0547f0fb895f81f75a2c_JaffaCakes118
-
Size
192KB
-
MD5
0743bf22194e0547f0fb895f81f75a2c
-
SHA1
417b03ca0afc30a7b09025502fa150204e6d7227
-
SHA256
596bb38e0050562017a993150a95fe502761534de124b383ed06282528f79573
-
SHA512
656b0d0dc86c048b194500931f64b258eceb46909603422ea6daee93e3dd14391cd908203f31a69d7562973b7a9e06902321b45585d533ce37c840b2782899f3
-
SSDEEP
3072:EueAaDZnWTsmZyS/cSZdQy4kUHXmXSoUXLepzhOwSRHcjKz2PjRjaxRmCS4Z4/i:zeAUnWTsmZymcIuy4kUHVoUXipzhOwSI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0743bf22194e0547f0fb895f81f75a2c_JaffaCakes118
Files
-
0743bf22194e0547f0fb895f81f75a2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
3064afdeb6dc3c917292a10644d9cb9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetLastError
CreateDirectoryA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GetSystemDirectoryA
GetCurrentProcessId
GetCurrentThread
GetProcAddress
LoadLibraryA
Sleep
GetModuleHandleA
ExitProcess
GetModuleFileNameA
GetTempPathA
MoveFileA
WriteFile
GetCurrentThreadId
WaitForSingleObject
OpenEventA
CreateEventA
GetShortPathNameA
ExpandEnvironmentStringsA
SleepEx
SetUnhandledExceptionFilter
CreateProcessA
GetStartupInfoA
SetFilePointer
CopyFileA
GetCommandLineA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
msvcrt
_except_handler3
memmove
srand
strncmp
strrchr
strstr
strncpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
_strlwr
malloc
memcpy
tolower
_ftol
__CxxFrameHandler
_itoa
_strupr
ws2_32
listen
Sections
.t Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ