Static task
static1
Behavioral task
behavioral1
Sample
356164e1bc43d7344752bcd19bc6e3d1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
356164e1bc43d7344752bcd19bc6e3d1_JaffaCakes118
-
Size
359KB
-
MD5
356164e1bc43d7344752bcd19bc6e3d1
-
SHA1
cc7d7179990c50615e0cba48605daa760cb2d20a
-
SHA256
4b24afb216fdfc8251d6c4aea093e1de53ff4c69b0d3079731eaba79c48794da
-
SHA512
7ff77e6ffaa1eac9214e42b61993d0d99bb16963cda58a2059a20cb5652e965955bf937e81c2b455648a83f4449a5d7c91b1e224cbef40737faba49ac2bda493
-
SSDEEP
6144:OD7m79S9++rYPn0taeB0QYBVs5UZiGBntPA1sht29dU0e6xVMi:Onm790c60bL6ExAeht2HU0eYVp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 356164e1bc43d7344752bcd19bc6e3d1_JaffaCakes118
Files
-
356164e1bc43d7344752bcd19bc6e3d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsr. Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE