Static task
static1
Behavioral task
behavioral1
Sample
62cd8dd8a7c2c6fb76a77035e6b6d682_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62cd8dd8a7c2c6fb76a77035e6b6d682_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62cd8dd8a7c2c6fb76a77035e6b6d682_JaffaCakes118
-
Size
90KB
-
MD5
62cd8dd8a7c2c6fb76a77035e6b6d682
-
SHA1
a1263e83c329ce86d53d1b06ff6e287b3fb3e51c
-
SHA256
eb021e49af16f52d7657149945b22b5f3f46ec9042b94d3a0f46dcab71755579
-
SHA512
c371c8e7a80142be68cbe93f1946adabd847aa8a60679fa77dfa5073acc62843270ecd381a2895c24333a485b7a9473f2450ec885d217328c189bdaf8e91cfd7
-
SSDEEP
1536:EhzZSnGZmvNnR5mpppihgDhxiidxuyo2NMTYH5fwrZLjDmXbGhbsm:Ex0GZUZRcpppE+hxdxuP2STG5fkPDEGv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62cd8dd8a7c2c6fb76a77035e6b6d682_JaffaCakes118
Files
-
62cd8dd8a7c2c6fb76a77035e6b6d682_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3cc90bf118e04818b8c6660a4c0068c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcpy
_snprintf
sprintf
printf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
strlen
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
rand
free
_snwprintf
memset
malloc
strcpy
strcat
wcscpy
atoi
strcmp
strstr
fopen
fclose
_initterm
atol
kernel32
SetErrorMode
DeleteFileW
GetModuleFileNameW
GetCommandLineW
GetTickCount
MultiByteToWideChar
CreateFileW
WriteFile
CloseHandle
Sleep
SetLastError
GetModuleHandleA
GetProcAddress
GetLastError
GetStartupInfoA
ws2_32
send
socket
closesocket
user32
MessageBoxA
FindWindowA
GetClassNameA
IsZoomed
shell32
SHGetSpecialFolderPathW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ