Static task
static1
Behavioral task
behavioral1
Sample
73fe03983c7f0ea12d803310fe63bd08_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73fe03983c7f0ea12d803310fe63bd08_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73fe03983c7f0ea12d803310fe63bd08_JaffaCakes118
-
Size
84KB
-
MD5
73fe03983c7f0ea12d803310fe63bd08
-
SHA1
d964f74d8e2f11169cb535e07768ac3823d2e8ed
-
SHA256
99bd7d928eb68a3b49b4c9ef7e9b4ed7c6ce8cd1f161175ca2dda50c0bb908fc
-
SHA512
ed396fb0a40b33a494ee2bf15b9c8168c4d3d3d306b2d09e610f426823cdeb79a384c2619b688ad24b750c3ef714494f54febeb59bb271b4e83ab9d6600b1bbb
-
SSDEEP
1536:jiwur2/aimscHddv0LPGvumQZXYUzwKy85pdjGKgaCxEw:jbuSiivgdyLPbmTdrqpdjGPP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73fe03983c7f0ea12d803310fe63bd08_JaffaCakes118
Files
-
73fe03983c7f0ea12d803310fe63bd08_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e13abba6ae414a0ad1db4af8339d0f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
strlen
time
strstr
memset
fopen
printf
fseek
ftell
fgetc
fread
fclose
strcpy
strcat
exit
sprintf
kernel32
Sleep
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
GetLastError
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
lstrlenA
lstrcpyA
lstrcatA
MoveFileA
CreateFileA
WriteFile
CloseHandle
WinExec
Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
DeleteFileA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetTickCount
GetModuleFileNameA
VirtualProtect
Sections
.text Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsf0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.dsf1 Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ