Static task
static1
Behavioral task
behavioral1
Sample
19c7af975ebe691a89ee3e073173c6c4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19c7af975ebe691a89ee3e073173c6c4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19c7af975ebe691a89ee3e073173c6c4_JaffaCakes118
-
Size
972KB
-
MD5
19c7af975ebe691a89ee3e073173c6c4
-
SHA1
3eaaa5eca00e2eaf0eeebd03a4121ac05d08a45a
-
SHA256
936c5a935011c742430ddfd9a476340d8630620761237a6887a5e0d4e8b64f19
-
SHA512
efffcf6129edc0983a2e8b82bf7f38e970069cf9cf6d7f72adb2857f8574a6930d0b5eac48a0c71a7b54ff7cbd7b926c1c5c0a22668cb5d417cea0cc95213f4c
-
SSDEEP
24576:xXwbywNTZc8bN6pV90xFNCUA4/zDgRPHHxElFzv:xXw1NTeYCV6xrICzDgRPH+Bv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19c7af975ebe691a89ee3e073173c6c4_JaffaCakes118
Files
-
19c7af975ebe691a89ee3e073173c6c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE