Static task
static1
Behavioral task
behavioral1
Sample
3abdafeebf00522b9ff75f70da27a45c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3abdafeebf00522b9ff75f70da27a45c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3abdafeebf00522b9ff75f70da27a45c_JaffaCakes118
-
Size
106KB
-
MD5
3abdafeebf00522b9ff75f70da27a45c
-
SHA1
79b086842b3a8162c9f97f0c11e3ab203b304eeb
-
SHA256
b50aecf97138bb0614a4f1409bade7cc036c00da490bcbf4e9580efb17b09846
-
SHA512
d6941371004bcb034259965c23be61c904cd4239c2e91532004209fd2565e381eb08f71791bb0869d9abbd6a8f85744dab90d34cbe4c276a11d82d68cc146ad8
-
SSDEEP
3072:4H5fd33Y0dSaLffUQHAR33uvrO4j5FCMlcxyNUNymWraizpxv4QqxE+upiJ:4Zfd3oTlQHg33uvrO4j5FCMlcxyNUNyS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3abdafeebf00522b9ff75f70da27a45c_JaffaCakes118
Files
-
3abdafeebf00522b9ff75f70da27a45c_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c5fd423f07232cff77d38c808b78fe9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetFullPathNameA
SetUnhandledExceptionFilter
lstrcmpiA
msvcrt
_access
_close
_dup
_dup2
_execvp
_getpid
_open
_putenv
_read
_stat
_strdup
_unlink
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_cwait
_errno
_flsbuf
_iob
_onexit
_pipe
_setmode
_spawnv
_spawnvp
_stricmp
abort
atexit
calloc
exit
fflush
fprintf
fputc
free
fwrite
getenv
malloc
memcpy
printf
puts
raise
realloc
signal
sprintf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strpbrk
strstr
vfprintf
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE