Static task
static1
Behavioral task
behavioral1
Sample
685e10f1393eaee470224b7fe1359202_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
685e10f1393eaee470224b7fe1359202_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
685e10f1393eaee470224b7fe1359202_JaffaCakes118
-
Size
14KB
-
MD5
685e10f1393eaee470224b7fe1359202
-
SHA1
d889e7201e8dfe9d20d6ca7257483d97244944d7
-
SHA256
dad4565178f50b603a2ba88a2e43cd7d5bf64cd1176c5c5948cd90e80441324c
-
SHA512
e234bee3cf41d5cc1ca2ca62d0072b8fe07ada8c489ab0cf34031e56092cf2a96d9a37812128a35179c51e87bd22165d5f0820f55db5c28ae58f4ab570810ef9
-
SSDEEP
384:WCqyJ2f8tqcnjeX77Cn9KZYGhk7wj/k4k/+rCM4TYWekrxWrX:3J2f8tqcnjeX7uEYt4k/+r+TXsX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 685e10f1393eaee470224b7fe1359202_JaffaCakes118
Files
-
685e10f1393eaee470224b7fe1359202_JaffaCakes118.exe windows:4 windows x86 arch:x86
79e223f63d3241ff6485bf1d8c1753a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
FindFirstFileA
CreatePipe
GetSystemDirectoryA
WaitForSingleObject
WriteFile
ReadFile
SetFilePointer
GetFileSize
CreateFileA
CloseHandle
GetTempPathA
TerminateProcess
Sleep
GetProcAddress
GetStartupInfoA
CreateProcessA
DeleteFileA
CopyFileA
GetShortPathNameA
GetEnvironmentVariableA
GetModuleFileNameA
GetLastError
CreateMutexA
lstrlenA
GetVersionExA
GetVolumeInformationA
GetComputerNameA
LoadLibraryA
FreeLibrary
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
user32
wsprintfA
shell32
SHChangeNotify
SHGetSpecialFolderPathA
ShellExecuteExA
ws2_32
WSAStartup
WSACleanup
inet_ntoa
gethostbyname
shlwapi
PathFileExistsA
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
strstr
strcpy
strlen
memcpy
fclose
fwrite
fopen
strcmp
memset
strcat
strrchr
fread
sprintf
_exit
_XcptFilter
exit
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ