Static task
static1
Behavioral task
behavioral1
Sample
7308c40d5f90648f542eadff5a8255ec_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7308c40d5f90648f542eadff5a8255ec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7308c40d5f90648f542eadff5a8255ec_JaffaCakes118
-
Size
56KB
-
MD5
7308c40d5f90648f542eadff5a8255ec
-
SHA1
c93cb767338f0e6eb878edb5a83116eebe36d461
-
SHA256
a4b3a691ce6a3e55440b9a847436f083662adf5ab5bcd5f171cec8ec643c64dc
-
SHA512
8899f2129cd051bfd5d5f1d27156284eed86a0c9c6aacaac07ec80cc0b41c5d88a2b028c72c4bc36d5788ce1786c12647f93cbfd5a36798cd42849d46ddf7157
-
SSDEEP
768:A4JpVfMPCXp8psFM1EWND33jo7gSXeEN8kWbvNspVUQNO:bHMOp4fD3sfXVN8kWZspVUQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7308c40d5f90648f542eadff5a8255ec_JaffaCakes118
Files
-
7308c40d5f90648f542eadff5a8255ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
df607100a54683d7f9ff4f7df5b02cbc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__getmainargs
_except_handler3
_controlfp
__p___initenv
exit
_XcptFilter
_exit
_snprintf
strchr
sprintf
malloc
wcstombs
isdigit
atoi
srand
time
rand
??2@YAPAXI@Z
??3@YAXPAX@Z
calloc
free
__set_app_type
__CxxFrameHandler
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetTickCount
GetModuleFileNameA
GetShortPathNameA
GetEnvironmentVariableA
lstrcpyA
lstrcatA
GetCurrentThread
GetVersionExA
GetFileAttributesA
GetCurrentProcess
LockResource
GetLastError
mfc42
ord537
ord535
ord2818
ord800
ord540
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sxv Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ