Static task
static1
Behavioral task
behavioral1
Sample
43d1de312205256d1a729cf34e745ffd_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
43d1de312205256d1a729cf34e745ffd_JaffaCakes118
-
Size
136KB
-
MD5
43d1de312205256d1a729cf34e745ffd
-
SHA1
1349053ee9f8af8d35b9f18ed68df091dcb6a930
-
SHA256
55c48cf75199edff1d78c8685acd3e4c8d82f8af83a8119ab5a894484b19708b
-
SHA512
725336c281696d05730ae9ef613afc3ac89d9df15e0e1f6939c2054bf39a7fd165c56bdaf55271d0fbe7c91c3bf3640b8f2ef1ca28aef589a09961ff042354e5
-
SSDEEP
3072:sl/Gi+LFIz/g0Clil9nOEDkB9if8X25h581ps33NtPH:sl/Gi+LFIz/g0Clil9nOXiEXaNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43d1de312205256d1a729cf34e745ffd_JaffaCakes118
Files
-
43d1de312205256d1a729cf34e745ffd_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f882511bcb3d06be2cf7dfad76eca99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetConsoleScreenBufferInfo
SetConsoleCtrlHandler
GetComputerNameW
GlobalFree
GlobalUnlock
GetModuleHandleW
GetStdHandle
GetCommandLineW
GetEnvironmentVariableW
SetConsoleMode
GetConsoleMode
WideCharToMultiByte
Sleep
ExitProcess
MultiByteToWideChar
GlobalAlloc
GetVersionExA
LocalFree
FormatMessageW
GetLastError
GlobalLock
GetModuleFileNameW
SetLastError
WriteFile
lstrlenW
user32
LoadStringA
LoadStringW
msvcrt
memcpy
_wsystem
wcstombs
_assert
_fputwchar
time
clock
_wcsnicmp
fgetws
fclose
fflush
fwrite
_dup2
_iob
_wgetenv
wprintf
memset
_wtoi
wcscmp
_wtol
wcsncpy
_setmbcp
_wsetlocale
free
wcscat
wcscpy
malloc
wcslen
_dup
_setmode
rewind
fread
wcstol
_errno
wcschr
__p__fmode
fwprintf
wcsstr
_wcsicmp
fputwc
fputws
_getws
_wmktemp
wcstok
iswctype
realloc
vfwprintf
system
__p___winitenv
ftell
fseek
_wfopen
fopen
memmove
_fdopen
_exit
_XcptFilter
exit
_controlfp
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__set_app_type
_except_handler3
odbc32
ord132
ord176
ord108
ord110
ord61
ord138
ord20
ord127
ord5
ord64
ord111
ord72
ord9
ord141
ord150
ord139
ord75
ord24
ord155
ord31
ord136
ord135
ord43
ord13
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE