Static task
static1
Behavioral task
behavioral1
Sample
733c2b1c69c4a06810a464492f8ca617_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
733c2b1c69c4a06810a464492f8ca617_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
733c2b1c69c4a06810a464492f8ca617_JaffaCakes118
-
Size
132KB
-
MD5
733c2b1c69c4a06810a464492f8ca617
-
SHA1
c47bb6d558be007dbcb1907d8b7044cc159159cc
-
SHA256
f04d7d6ae1a989b547fa5113ec4561de98d0d1bac0f76563fdd1dac2ab0cd071
-
SHA512
165c44bc53628e2e93cf2621fdaff352ad6d540241afb926b5b3641fc2a20c8a408554feabd3feff40238e25adbf5d3f2ce426db165ff3f58524eff9ae3f2616
-
SSDEEP
3072:EMMs6sAhrhToeUNtbzt82rIi0aji2sHvrrtiwNfO:7ZvAbToeZjajVQn0O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 733c2b1c69c4a06810a464492f8ca617_JaffaCakes118
Files
-
733c2b1c69c4a06810a464492f8ca617_JaffaCakes118.exe windows:4 windows x86 arch:x86
2d7de4a7825ddef86ecb985a1e4e069a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
ExitProcess
GetStartupInfoA
GlobalFindAtomA
WritePrivateProfileSectionW
GetNamedPipeInfo
SetCurrentDirectoryW
lstrcpyA
LocalFileTimeToFileTime
CreateFileW
GlobalCompact
FindFirstChangeNotificationA
GetDriveTypeW
GetEnvironmentStringsW
OpenWaitableTimerW
SetConsoleNlsMode
EnumTimeFormatsW
GetProcessPriorityBoost
CreateFiber
GetProfileSectionA
FindFirstFileExA
GetSystemDefaultUILanguage
GetCPInfoExW
ReadConsoleOutputCharacterA
GetLogicalDriveStringsA
SetCommBreak
GetConsoleNlsMode
FindFirstFileExA
ReadConsoleOutputA
GetCommState
EnumUILanguagesW
Sections
.data Size: 8KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ