Static task
static1
Behavioral task
behavioral1
Sample
350aa31a00be1c6ffb7800a18bdee879_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
350aa31a00be1c6ffb7800a18bdee879_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
350aa31a00be1c6ffb7800a18bdee879_JaffaCakes118
-
Size
39KB
-
MD5
350aa31a00be1c6ffb7800a18bdee879
-
SHA1
8e56a081ac62a5eed097ece9a0697aad0965e277
-
SHA256
cae1038ba20e591cff2f511af083fe954a8b836d3c17a0bcea7c56dd462369ac
-
SHA512
edfd1de49fdb3f57a377852ef172b934ec7c0e064bc9afe8bc2d3f91353514e15624765d1c06a287cff1d4e71dbef9e0bdc39239ee6598bd8adc71a9a71b8eaa
-
SSDEEP
768:TVRh0NMojYsmpooUEUwE5V9tPOmDjLROgrbvsObXlN6tnQl+g:TSNMAYsoLPELnjROY7sOTyZg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 350aa31a00be1c6ffb7800a18bdee879_JaffaCakes118
Files
-
350aa31a00be1c6ffb7800a18bdee879_JaffaCakes118.exe windows:4 windows x86 arch:x86
616e400e1cee4305188fe458510c7618
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ReadFile
GetFileSize
FreeLibrary
GetModuleHandleA
CreatePipe
CreateProcessA
GetLocalTime
GetLastError
FindClose
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
TerminateProcess
OutputDebugStringA
WaitForSingleObject
DeleteFileA
SetFilePointer
CopyFileA
GetEnvironmentVariableA
GetCurrentProcess
Process32Next
Module32First
Process32First
CreateToolhelp32Snapshot
OpenProcess
GetDriveTypeA
GetLogicalDrives
CreateThread
CreateMutexA
GetModuleFileNameA
LocalFree
WriteFile
Sleep
LoadLibraryA
GetProcAddress
lstrcmpA
lstrcpyA
lstrlenA
PeekNamedPipe
GetStartupInfoA
user32
wsprintfA
advapi32
LookupPrivilegeValueA
RegDeleteKeyA
OpenProcessToken
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
msvcrt
strstr
__CxxFrameHandler
free
malloc
sprintf
rand
srand
time
_except_handler3
atoi
strncpy
_snprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
_CxxThrowException
_itoa
_strnicmp
_stricmp
??1type_info@@UAE@XZ
oleaut32
GetErrorInfo
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE