Static task
static1
Behavioral task
behavioral1
Sample
25157d2170194f1dfaafee1c30d09579_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25157d2170194f1dfaafee1c30d09579_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25157d2170194f1dfaafee1c30d09579_JaffaCakes118
-
Size
129KB
-
MD5
25157d2170194f1dfaafee1c30d09579
-
SHA1
45eb18f51ddc3c6d2ff24645c31db6cc57e53e05
-
SHA256
27869549d831648763efc989eb776f0d4b0dae5d7439b2a69b2b0764f04a4cc2
-
SHA512
537fb22787852c32e0bac1227842a4ddb82b2fe493d5d08dd78e6d057bc7df9078f3729534400f0312f8e41021e4bdb43f7fef104cb9819189692d9262e15691
-
SSDEEP
3072:tq7myTTy8qQ7BvEPNpze1sxdH6Pr1fvIKEdTzuhOChC38usHfJY6En6T2TSCOCOL:ttI28qQ7BvEPNSsxdH6Pr1fvIKEdTzul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25157d2170194f1dfaafee1c30d09579_JaffaCakes118
Files
-
25157d2170194f1dfaafee1c30d09579_JaffaCakes118.exe windows:4 windows x86 arch:x86
a16de01030ee86c5847785afeb3ca8d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
wininet
FtpCreateDirectoryA
FtpPutFileA
FtpSetCurrentDirectoryA
InternetCloseHandle
InternetConnectA
InternetOpenA
kernel32
AddAtomA
CopyFileA
CreateSemaphoreA
DeleteFileA
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
GetPrivateProfileStringA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
getenv
malloc
memchr
memcpy
memmove
memset
puts
signal
strcat
strcmp
strcpy
strlen
shell32
SHGetFolderPathA
Sections
Size: 53KB - Virtual size: 52KB
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 464B
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_WRITE
Size: 287B - Virtual size: 287B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE