Static task
static1
Behavioral task
behavioral1
Sample
35913f3b37575ca6b96e65e6dd34dfcc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35913f3b37575ca6b96e65e6dd34dfcc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35913f3b37575ca6b96e65e6dd34dfcc_JaffaCakes118
-
Size
55KB
-
MD5
35913f3b37575ca6b96e65e6dd34dfcc
-
SHA1
6893c74949bdc7e870fb8775506f2d0a3c08a874
-
SHA256
ecb01d174cd50163afc9d9461b1f62d46f792abb4d9ff074d37780d20549c84f
-
SHA512
1573bb407a89a59424ff08324d15dc36eb1ef85773a20bf067717a690d16d41b13ec26039fa0dc2c9349bca696eb8ee39007af8b2bc9ce6545774b3776ce4a49
-
SSDEEP
384:uIvsbWUvxpKgwEgvkvp+22WBFD/H/vgvClFhewaujmLT4IiMbiW6fg:rkhlkvCn6P4Qnx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35913f3b37575ca6b96e65e6dd34dfcc_JaffaCakes118
Files
-
35913f3b37575ca6b96e65e6dd34dfcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d061062ca5aa59f2bd6d8c0ff601680
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gds32
ord248
ord37
ord250
ord48
ord39
ord8
ord176
ord166
ord65
ord160
ord169
ord116
ord168
ord249
ord51
ord156
ord162
ord115
ord63
ord10
ord67
ord83
ord2
ord17
ord24
ord141
ord43
ord1
ord42
ord247
msvcrt
_pctype
_adjust_fdiv
__setusermatherr
_dup2
fopen
_exit
fprintf
_iob
longjmp
atoi
_open_osfhandle
atol
fclose
_setjmp3
vsprintf
vfprintf
getchar
fflush
putc
strncpy
exit
getenv
_errno
__getmainargs
_isctype
__mb_cur_max
strncmp
fgets
_close
_controlfp
_XcptFilter
__p___initenv
_initterm
_except_handler3
__p__commode
__p__fmode
__set_app_type
kernel32
GetVersionExA
GetCurrentThread
GetCurrentProcess
GetACP
GetComputerNameA
OpenProcess
GetLastError
CloseHandle
GetConsoleCP
user32
CharToOemA
advapi32
RegOpenKeyExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryValueExA
RegCloseKey
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE