Static task
static1
Behavioral task
behavioral1
Sample
697d643a46a644410157db5fea45e114_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
697d643a46a644410157db5fea45e114_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
697d643a46a644410157db5fea45e114_JaffaCakes118
-
Size
168KB
-
MD5
697d643a46a644410157db5fea45e114
-
SHA1
2239e2024a074e1a45297e6d3338f512da354923
-
SHA256
1397c487074b19cd16c885b803a9d92ebc5f2e7718cdc205ce7fa13956d707f4
-
SHA512
4cfebe2518b5d668c5a61b23a5aaaecaf5c7b73bfb9ca861929c6d5144f9c5d1f3775914bbc8d88e527db8ab8b20d608196582673a2f3100ed80053d03bd069e
-
SSDEEP
3072:De51fGnOfv8AF7Us28+J1SgVSECawPwSUIw/WgcpS37JgVL:K51fPGs28k9VCvPwSvhS37Jg5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 697d643a46a644410157db5fea45e114_JaffaCakes118
Files
-
697d643a46a644410157db5fea45e114_JaffaCakes118.exe windows:4 windows x86 arch:x86
b1f6e07d9dfd751925cd1eb7a66dcec1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetFullPathNameA
GetLastError
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
_fstat
_isatty
_strdup
_unlink
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_filbuf
_flsbuf
_iob
_isctype
_onexit
_pctype
_setmode
_stricmp
abort
atexit
atoi
calloc
clearerr
ctime
exit
fclose
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fsetpos
fwrite
getenv
localeconv
localtime
malloc
memcpy
memset
perror
printf
putchar
puts
qsort
realloc
setlocale
signal
sscanf
strchr
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strtol
time
tolower
toupper
vfprintf
wcslen
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE