Static task
static1
Behavioral task
behavioral1
Sample
255a992c241bb84b891b10af4eb7ec0d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
255a992c241bb84b891b10af4eb7ec0d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
255a992c241bb84b891b10af4eb7ec0d_JaffaCakes118
-
Size
22KB
-
MD5
255a992c241bb84b891b10af4eb7ec0d
-
SHA1
ac71f458b057b9d7f7f646f168a66e0b7cfa5c7a
-
SHA256
b04273e34177d2ab28c25bb053799d02725d8045468ce03489aa25d0b7dd7071
-
SHA512
4b9e75369b02c986136bf0dcdc22377abadb76e51c41f4ff2beb228e1573ac986e0ba758bb8396c22327a3a45be5c06303d597f1d40292c875d35921a5a5a9ef
-
SSDEEP
384:YUnndlK18YCefbfjpa3+tgr5FX7sy/WE/uOQUfd61gte:YUnndEiYh7pm5FXffeUfd8gte
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 255a992c241bb84b891b10af4eb7ec0d_JaffaCakes118
Files
-
255a992c241bb84b891b10af4eb7ec0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
55f18a982309e2f233ebb5f8dfb6c56b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord6876
ord535
ord924
ord922
ord537
ord540
ord2919
ord2820
ord3811
ord5651
ord3616
ord3663
ord6385
ord1979
ord5442
ord823
ord3318
ord2818
ord3127
ord5186
ord350
ord354
ord941
ord2393
ord690
ord1988
ord6657
ord6881
ord1074
ord5204
ord6426
ord389
ord2764
ord6877
ord860
ord4277
ord858
ord800
ord4278
ord5710
ord4129
ord825
ord1575
ord815
ord665
ord561
msvcrt
time
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
rand
malloc
free
_mbscmp
_mbschr
atoi
fseek
ftell
fread
_mbstok
_chdrive
_snprintf
_EH_prolog
fclose
fwrite
fopen
__CxxFrameHandler
_getdrive
kernel32
GetModuleFileNameA
FindFirstFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetComputerNameA
FindClose
MoveFileExA
GetStartupInfoA
FileTimeToSystemTime
GetCommandLineA
GetModuleHandleA
Sleep
FindNextFileA
user32
SetTimer
shlwapi
PathRemoveFileSpecA
PathFileExistsA
msvcp60
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.data Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE