Static task
static1
Behavioral task
behavioral1
Sample
2f701958fb41ccba8e73d1bc7d37a0ad_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f701958fb41ccba8e73d1bc7d37a0ad_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f701958fb41ccba8e73d1bc7d37a0ad_JaffaCakes118
-
Size
84KB
-
MD5
2f701958fb41ccba8e73d1bc7d37a0ad
-
SHA1
fe42defc66ad74983571fbfd4d7fb8e7bd659fe1
-
SHA256
7f576e5d966b35592915f59f6c578a9cfccf7276300ee4e38cc0424dfa53faea
-
SHA512
03aca0964f31cd5b74cd6c4d24739fd65a798969e3436c86a4afa22c15e2261897006fbd202ca24cccb94782f4be1cd48750d90c50e27d8364d4aac534a99fc1
-
SSDEEP
768:RiiZJiM82VzxYypw0IoJTi7xiJt7ucgATu2o9c7pmvLGcjj//wla98igLa1wSLX:QivipcZ/Tic/lTpo9a+LG2//wlPLa5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f701958fb41ccba8e73d1bc7d37a0ad_JaffaCakes118
Files
-
2f701958fb41ccba8e73d1bc7d37a0ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
88eaa9eff83d700328c06c3008001d86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
cos
fopen
malloc
signal
sin
strcmp
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 400B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE