Static task
static1
Behavioral task
behavioral1
Sample
0f944a1ef2edda52cccd16ba4f53a9a3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f944a1ef2edda52cccd16ba4f53a9a3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f944a1ef2edda52cccd16ba4f53a9a3_JaffaCakes118
-
Size
27KB
-
MD5
0f944a1ef2edda52cccd16ba4f53a9a3
-
SHA1
e84c201226474cbfc9e6f5ba6f0cdb71525b2e2d
-
SHA256
27c409e6caefcad69c6f074b3c912f31baab8294634c217f505d45d32008ce26
-
SHA512
2e0cea4e4553e20747097f043eef8c7f88a2944caf1c3d3963a48d8f3d9a655e669e0b91f0027fe971f10869e4dbdd6dd358c99f7f2e0fbcb3baa7fa58c465b8
-
SSDEEP
768:nv5c1p5+9KmhWT3Kf3pAmH5Fr8EEWq4s2XM6XbdgfLsXzrRSC341mSNXLcxX4Snd:n1qWNS/5rj8Wnzq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f944a1ef2edda52cccd16ba4f53a9a3_JaffaCakes118
Files
-
0f944a1ef2edda52cccd16ba4f53a9a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
8126f8945b23fac9d8c218a86248787c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
fprintf
fgets
fclose
fopen
atoi
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
srand
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strncpy
strtok
_cexit
_snprintf
??1type_info@@UAE@XZ
_CxxThrowException
strstr
strchr
??_V@YAXPAX@Z
__CxxFrameHandler
memcpy
strcat
sprintf
rand
strcmp
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
??_U@YAPAXI@Z
strcpy
_vsnprintf
strlen
exit
_except_handler3
?terminate@@YAXXZ
kernel32
GetTempPathA
lstrcmpiA
GetModuleHandleA
ExpandEnvironmentStringsA
WaitForSingleObject
GetLastError
ExitThread
Sleep
GetTickCount
GetProcAddress
LoadLibraryA
GetStartupInfoA
LocalFree
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE