Static task
static1
Behavioral task
behavioral1
Sample
38683fe50b0c36b7bc7209245f62be5e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38683fe50b0c36b7bc7209245f62be5e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38683fe50b0c36b7bc7209245f62be5e_JaffaCakes118
-
Size
71KB
-
MD5
38683fe50b0c36b7bc7209245f62be5e
-
SHA1
38ba267851c2844ec23fa954cbceb3668382a9e9
-
SHA256
db1d3378045f1872697255ad846e9db0d025b73980233cdb6898c30ca9a4616a
-
SHA512
969fe42ce67c0d67953d27d0622d61369cf51bdb898431a65ad7b2e53a8191dd2a4c73227eb7a84a8c854e9f90063dda2b7dd4a874fdb6d6de1b4ed3485c4a21
-
SSDEEP
768:/OC9M97EjDkgj8Ra9zr6ZfKGnswGR20D7V/1nrRcvsw8wB8Qw:/894jJUQrmtsL20D7Vrc1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38683fe50b0c36b7bc7209245f62be5e_JaffaCakes118
Files
-
38683fe50b0c36b7bc7209245f62be5e_JaffaCakes118.exe windows:1 windows x86 arch:x86
7366d9f83d64bf935e7aca12b97a7ba2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcscat
_snwscanf
vswprintf
_heapset
_wcsncoll
_scalb
_lseek
_wpgmptr
_logb
_XcptFilter
_winver
_adj_fdivr_m32i
memset
_heapadd
strtol
_exit
_resetstkoflw
exit
_heapwalk
_ultoa
_initterm
_acmdln
_except_handler3
asin
_execle
__setusermatherr
realloc
abort
_controlfp
_mbsrev
memcpy
__set_app_type
__p__fmode
_assert
__p__commode
__getmainargs
sprintf
_futime64
strpbrk
_adjust_fdiv
kernel32
OpenEventA
FindClose
InitializeCriticalSection
GetModuleHandleA
RaiseException
LeaveCriticalSection
CreateProcessA
GetVersion
GetSystemInfo
lstrlenA
GetDateFormatA
CreateToolhelp32Snapshot
GetFileAttributesA
MultiByteToWideChar
GetStartupInfoA
SetUnhandledExceptionFilter
GlobalMemoryStatus
SetLastError
CreateEventA
lstrcatA
RtlUnwind
FindFirstFileA
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ