Static task
static1
Behavioral task
behavioral1
Sample
345bacef5d6d029a34cea8bd2cb5a413_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
345bacef5d6d029a34cea8bd2cb5a413_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
345bacef5d6d029a34cea8bd2cb5a413_JaffaCakes118
-
Size
57KB
-
MD5
345bacef5d6d029a34cea8bd2cb5a413
-
SHA1
bb6d7498c38ae3b2e3e3982f13ab3fb34d88ef09
-
SHA256
ac67725bfaa0927912332ab6c56718ce448eea062d86dc2ced5e024efa632683
-
SHA512
b45d5fb4e3f74fd37d7357dd75e51c0611d85ecee40bcfd292bde4911ae3504edb56861020b202d9979ff2ae15740b5817109b39a2ea9c4594ed8b4f70f08335
-
SSDEEP
768:Tc3eYXMObSXbBw0Jm8n8VIeRJX/dLYSbXicxoha5G:TcrSLbJm8n8VFXZYmi/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 345bacef5d6d029a34cea8bd2cb5a413_JaffaCakes118
Files
-
345bacef5d6d029a34cea8bd2cb5a413_JaffaCakes118.exe windows:4 windows x86 arch:x86
7c3082e096e1409b58e1f9e36a8b9054
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
LoadResource
SizeofResource
FindResourceA
SetCurrentDirectoryA
SetFileAttributesA
MoveFileExA
GetModuleFileNameA
LockResource
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
GetStartupInfoA
WriteFile
GetSystemDirectoryA
CloseHandle
user32
CreateWindowExA
advapi32
RegQueryValueExA
RegOpenKeyExA
msvcrt
__setusermatherr
??2@YAPAXI@Z
rename
_access
strtok
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
strcat
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE