Static task
static1
Behavioral task
behavioral1
Sample
0fe390496baab92207bc6aec00b792fb_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0fe390496baab92207bc6aec00b792fb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fe390496baab92207bc6aec00b792fb_JaffaCakes118
-
Size
119KB
-
MD5
0fe390496baab92207bc6aec00b792fb
-
SHA1
9c107f44b473022f6c651bb333ebe805b39f1ebe
-
SHA256
8511d3d0ca31c1dd8ecb5093c636e477c5f29defa33f4de81b2d90444a4f83f6
-
SHA512
da646ada9cf12984b2ca4339b5110a73a845075ef1219ed6ddcf3e31db913645f87f394d59d7eec2cc62cc9cebbf71c7aed92fc2033da52b3475277bdaa66901
-
SSDEEP
1536:pK2ABM4GhUNVs1kwM20HU0+piudV1HREkJMAe9rrmTgFHLl7yjHYnayeL:pKFcbkw0HU0QpHREkJMAe9fLlW4G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fe390496baab92207bc6aec00b792fb_JaffaCakes118
Files
-
0fe390496baab92207bc6aec00b792fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
0632dc5bf12a90eb2b9ee6c4a988045c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
printf
srand
_snwprintf
wcscpy
sprintf
_snprintf
memcpy
rand
memset
atoi
strcpy
strlen
malloc
free
fopen
fclose
strcmp
__p__commode
strstr
kernel32
SetErrorMode
DeleteFileW
GetModuleFileNameW
GetCommandLineW
TerminateProcess
GetTickCount
MultiByteToWideChar
CreateFileW
WriteFile
CloseHandle
FindResourceA
SizeofResource
LoadResource
LockResource
SetLastError
Sleep
GetModuleHandleA
GetProcAddress
GetStartupInfoA
ws2_32
send
user32
MessageBoxA
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE