Static task
static1
Behavioral task
behavioral1
Sample
47faf94c5eff9b4b39d1b6186da23f6b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
47faf94c5eff9b4b39d1b6186da23f6b_JaffaCakes118
-
Size
192KB
-
MD5
47faf94c5eff9b4b39d1b6186da23f6b
-
SHA1
cc40e98405624d172c374a87b81a08f942102ff9
-
SHA256
b938f0f084d74892efc1cd74bf1916adecce7783329bfd1138aca697a3d6601e
-
SHA512
42db7bde77701bb4e570992f4a0f2690c453c6c0e1566f38ce69f61bf43a7d50ff6d0c3147aa340ba4b172c1d957e32f0fc36b1d0df4f955976274c862f3ed65
-
SSDEEP
3072:hAb9gnWzFan60d8Lml/Mh27lE4wg8Pr9taVuGf0iOqWkYt7qcwH+uWP:hW9gnWzFGdgI7lEP7PGN0iivt7qc8S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47faf94c5eff9b4b39d1b6186da23f6b_JaffaCakes118
Files
-
47faf94c5eff9b4b39d1b6186da23f6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7531e735a262191e13e0411bda95752
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
srand
memset
_except_handler3
strncmp
__CxxFrameHandler
rand
_ftol
tolower
_itoa
memmove
kernel32
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetModuleFileNameA
GetCurrentThreadId
GetCommandLineA
CopyFileA
GetStartupInfoA
CreateProcessA
SetUnhandledExceptionFilter
SleepEx
SetEnvironmentVariableA
ExpandEnvironmentStringsA
CreateEventA
WaitForSingleObject
CreateFileA
SetFilePointer
WriteFile
GetTempPathA
GetCurrentDirectoryA
LoadLibraryA
GetCurrentProcess
CloseHandle
GetLastError
CreateDirectoryA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GetSystemDirectoryA
GetModuleHandleA
GetProcAddress
Sleep
ExitProcess
GetTickCount
IsBadWritePtr
shlwapi
SHCopyKeyA
SHDeleteKeyA
PathFileExistsA
SHGetValueA
user32
wsprintfA
GetActiveWindow
FlashWindow
ws2_32
closesocket
getprotobynumber
Sections
CODE Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ