Static task
static1
Behavioral task
behavioral1
Sample
61a364600df83db7c5c6b00831647d2e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61a364600df83db7c5c6b00831647d2e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61a364600df83db7c5c6b00831647d2e_JaffaCakes118
-
Size
76KB
-
MD5
61a364600df83db7c5c6b00831647d2e
-
SHA1
7725024ddb32253444d6fa38de7abe02b0fad079
-
SHA256
b1ddf414f3ae223a02dd525af416c1feaf4ec4714c758ac852783e424d203f56
-
SHA512
98ef84807aa92a0994160cf16f3c5ec70ad3edc0a0024350a45e2b61ed50f39ac6724d45faef24f43859c2b074ba183eb66964fd215f5cb0507cbf99d19f593d
-
SSDEEP
1536:camS6yPOshhov9UyxD2HvTj3Pz5cA0Ha42FFC8xJ1FIg1+:caOsQvy3NcVHa/FFC8xvvw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61a364600df83db7c5c6b00831647d2e_JaffaCakes118
Files
-
61a364600df83db7c5c6b00831647d2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
c5c3bcb8fcd4d9c0adc15112aa4e56cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
plc4
PL_strrchr
PL_CreateOptState
PL_GetNextOpt
nspr4
PR_GetSpecialFD
PR_OpenFile
PR_Cleanup
PR_Seek
PR_Read
PR_Write
PR_Close
PR_fprintf
msvcr80
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
exit
__initenv
atoi
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_initterm
kernel32
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE