Static task
static1
Behavioral task
behavioral1
Sample
69be267fe55852a22d1a11592b73f036_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69be267fe55852a22d1a11592b73f036_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69be267fe55852a22d1a11592b73f036_JaffaCakes118
-
Size
16KB
-
MD5
69be267fe55852a22d1a11592b73f036
-
SHA1
4066e852b033db2684f01b35aafa3c75b4aa4ff6
-
SHA256
100ee95949b73eba02fa157b3040b055d584e7289565439df43083ffc12071e7
-
SHA512
c0bfb7b72e5676000c71780a48a15028f5976aa59b4b2a8fd36e9c5668332bf9338a1edfb7761bc2214f48ad7545f4d29fb9e637e99217f5e7751b5966cb848d
-
SSDEEP
96:5475+Biuc1PRbadH3Cb3e5F5i6XdnZkTT37j3A+U3wCUPtboyn:5iibc15G3Cb3Wdo7LTU3pUP1oyn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69be267fe55852a22d1a11592b73f036_JaffaCakes118
Files
-
69be267fe55852a22d1a11592b73f036_JaffaCakes118.exe windows:4 windows x86 arch:x86
cf9e97861b6b31d0c25a825f92c88b9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetUserNameA
kernel32
CloseHandle
TerminateProcess
WaitForSingleObject
CreateProcessA
GetConsoleTitleA
GetTempPathA
GetCurrentThread
SetFileTime
GetTickCount
SystemTimeToFileTime
GetLocalTime
CreateFileA
ExitProcess
WriteFile
lstrcatA
FindAtomA
lstrcpynA
lstrlenA
GetTempFileNameA
lstrcpyA
GetShortPathNameA
GetModuleFileNameA
MoveFileExA
MoveFileA
DeleteFileA
GetModuleHandleA
GetSystemDirectoryA
GetStartupInfoA
user32
IsWindowVisible
GetDC
GetClassLongA
GetCursor
shell32
SHGetSpecialFolderPathA
msvcrt
_controlfp
_except_handler3
__set_app_type
strcat
strlen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE