Static task
static1
Behavioral task
behavioral1
Sample
312209ab1342e7dd35be136f6583cda3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
312209ab1342e7dd35be136f6583cda3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
312209ab1342e7dd35be136f6583cda3_JaffaCakes118
-
Size
20KB
-
MD5
312209ab1342e7dd35be136f6583cda3
-
SHA1
0e2a909ba008adc9871acd8752c48e702f495554
-
SHA256
f524b6e667e928bb4e84074d525eba8449aad4e296d352b5fc2b9c91ba978155
-
SHA512
0a05ff8e1f2ff1ab96623f205ab020744226e8e28b914c19c64cf5215857fc617d8e1e69906ab92ce56e18e367748ade2499987c2d365f67cb82f74c09ac804e
-
SSDEEP
192:I/OPTfNTyynXQfOntugSeiJxtPWfe5sRhgEgSi8fP1oynM1Cz:GOL/nHyxB5sRCEnn1K1Cz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 312209ab1342e7dd35be136f6583cda3_JaffaCakes118
Files
-
312209ab1342e7dd35be136f6583cda3_JaffaCakes118.exe windows:4 windows x86 arch:x86
40beab335f2cd2ac525d225bf68f35e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord940
ord540
ord2818
ord1105
ord825
ord823
ord860
ord4202
ord541
ord6282
ord665
ord3790
ord354
ord6143
ord536
ord6883
ord939
ord800
ord801
ord4129
ord5683
ord858
ord537
ord6930
ord535
ord6283
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p___argc
__p___argv
strncpy
atol
srand
time
rand
__CxxFrameHandler
_mbslwr
_stricmp
kernel32
GetModuleFileNameA
Sleep
GetTickCount
WaitForSingleObject
WinExec
MoveFileExA
GetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE