Static task
static1
Behavioral task
behavioral1
Sample
61bb426b25569b85472585eb7be77d34_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61bb426b25569b85472585eb7be77d34_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61bb426b25569b85472585eb7be77d34_JaffaCakes118
-
Size
198KB
-
MD5
61bb426b25569b85472585eb7be77d34
-
SHA1
9e5655e45c2ca7dec4a53ba5682588bb3f2fbf66
-
SHA256
9cea5c5bec8d28a6ce989cc6399ca06b345678263155a2481ce525b68dd2bdc8
-
SHA512
c8d0be8401e0938befbcc11345e7c690f31360a9a2255c9367f91350360dd8453489ec237d88bce790a917a03fcf87434d9285bf0c595051beb473c8a50bc176
-
SSDEEP
3072:Oal81XR/bFBpDvsCIKGAD6ajsFsmFnnMVUE9bAemGGiM:OaqNR/PVss6ajs7FnmUdG4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61bb426b25569b85472585eb7be77d34_JaffaCakes118
Files
-
61bb426b25569b85472585eb7be77d34_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbd9b96003f5bf46e00dfe40ac51aebb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
_close
_dup
_getpid
_lseek
_read
_strdup
_unlink
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_chsize
_errno
_iob
_onexit
_setmode
_winmajor
abort
asctime
atexit
atoi
calloc
clearerr
exit
fclose
fflush
fgetc
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getenv
localeconv
localtime
malloc
memcpy
printf
realloc
rename
setlocale
setvbuf
signal
sprintf
strcpy
strlen
time
tmpfile
toupper
vfprintf
zlib1
compress2
gzclose
gzdopen
gzread
gzwrite
uncompress
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/14 Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/29 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 1024B - Virtual size: 530B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/61 Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/73 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/87 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/99 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/112 Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/123 Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/134 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ