Static task
static1
Behavioral task
behavioral1
Sample
7659cac067b9a8aee54ff082b0b2a8b8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7659cac067b9a8aee54ff082b0b2a8b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7659cac067b9a8aee54ff082b0b2a8b8_JaffaCakes118
-
Size
94KB
-
MD5
7659cac067b9a8aee54ff082b0b2a8b8
-
SHA1
d8ad1b869d452d66cde56038524e5afef52e63ce
-
SHA256
f5d0639be6f3074357032644f5c931c62f779d03f2493326236d8d1fc80e997c
-
SHA512
ccbba6d45fb500dd9a7d1df413089cd71da25b5aee76e7a29edd908bc61dbdb4ec04de2db7317caedcae714287a45814d4aed173478ebf1dee8245584dab6fc5
-
SSDEEP
1536:dD5r6LFpZj7YvHX1QKnryP3ZnPyro412QBhfSaHOt3Di016XNgSXIK4ALHy7Yay9:R5r6LFpZj7YPX1QKn+P35ALHX776wZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7659cac067b9a8aee54ff082b0b2a8b8_JaffaCakes118
Files
-
7659cac067b9a8aee54ff082b0b2a8b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
2ea976d9257beee66cc0c43642d5181e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
libxml2-2_
__xmlDoValidityCheckingDefaultValue
__xmlGenericError
__xmlGenericErrorContext
__xmlGetWarningsDefaultValue
__xmlLoadExtDtdDefaultValue
__xmlParserDebugEntities
__xmlParserVersion
__xmlTreeIndentString
htmlCreatePushParserCtxt
htmlDocDump
htmlFreeParserCtxt
htmlParseChunk
htmlReadFile
htmlSaveFile
htmlSaveFileFormat
inputPush
xmlAddEncodingAlias
xmlC14NDocDumpMemory
xmlCheckVersion
xmlCleanupParser
xmlCopyDoc
xmlCreatePushParserCtxt
xmlCtxtReadFile
xmlCtxtReadIO
xmlCtxtUseOptions
xmlDebugDumpDocument
xmlDebugDumpEntities
xmlDeregisterNodeDefault
xmlDocDump
xmlDocGetRootElement
xmlDocSetRootElement
xmlEncodeEntitiesReentrant
xmlFree
xmlFreeDoc
xmlFreeDtd
xmlFreeEnumeration
xmlFreeParserCtxt
xmlFreeParserInputBuffer
xmlFreePattern
xmlFreeStreamCtxt
xmlFreeTextReader
xmlFreeValidCtxt
xmlGetExternalEntityLoader
xmlGetIntSubset
xmlGetNodePath
xmlHasFeature
xmlKeepBlanksDefault
xmlLineNumbersDefault
xmlLoadCatalogs
xmlMemFree
xmlMemMalloc
xmlMemRealloc
xmlMemSetup
xmlMemUsed
xmlMemoryDump
xmlMemoryStrdup
xmlNewDoc
xmlNewDocNode
xmlNewIOInputStream
xmlNewParserCtxt
xmlNewValidCtxt
xmlNoNetExternalEntityLoader
xmlNodeSetContent
xmlParseChunk
xmlParseDTD
xmlParseDocument
xmlParseFile
xmlParserInputBufferCreateFilename
xmlPatternGetStreamCtxt
xmlPatternMatch
xmlPatterncompile
xmlPedanticParserDefault
xmlReadFd
xmlReadFile
xmlReadIO
xmlReaderForFile
xmlReaderWalker
xmlRegisterNodeDefault
xmlRelaxNGCleanupTypes
xmlRelaxNGFree
xmlRelaxNGFreeParserCtxt
xmlRelaxNGFreeValidCtxt
xmlRelaxNGNewParserCtxt
xmlRelaxNGNewValidCtxt
xmlRelaxNGParse
xmlRelaxNGSetParserErrors
xmlRelaxNGSetValidErrors
xmlRelaxNGValidateDoc
xmlSAXDefaultVersion
xmlSaveClose
xmlSaveDoc
xmlSaveFile
xmlSaveFileEnc
xmlSaveFormatFile
xmlSaveFormatFileEnc
xmlSaveToFd
xmlSaveToFilename
xmlSchemaFree
xmlSchemaFreeParserCtxt
xmlSchemaFreeValidCtxt
xmlSchemaNewParserCtxt
xmlSchemaNewValidCtxt
xmlSchemaParse
xmlSchemaSetParserErrors
xmlSchemaSetValidErrors
xmlSchemaValidateDoc
xmlSchemaValidateStream
xmlSchematronFree
xmlSchematronFreeParserCtxt
xmlSchematronFreeValidCtxt
xmlSchematronNewParserCtxt
xmlSchematronNewValidCtxt
xmlSchematronParse
xmlSchematronValidateDoc
xmlSetCompressMode
xmlSetExternalEntityLoader
xmlShell
xmlStrcat
xmlStrdup
xmlStreamPop
xmlStreamPush
xmlStrndup
xmlSubstituteEntitiesDefault
xmlTextReaderConstLocalName
xmlTextReaderConstName
xmlTextReaderConstNamespaceUri
xmlTextReaderConstValue
xmlTextReaderCurrentNode
xmlTextReaderDepth
xmlTextReaderHasValue
xmlTextReaderIsEmptyElement
xmlTextReaderIsValid
xmlTextReaderNodeType
xmlTextReaderRead
xmlTextReaderRelaxNGValidate
xmlTextReaderSchemaValidate
xmlTextReaderSetParserProp
xmlUnlinkNode
xmlValidGetValidElements
xmlValidateDocument
xmlValidateDtd
xmlXIncludeProcessFlags
xmlXPathOrderDocElems
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
msvcrt
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
_snprintf
_vsnprintf
abort
atexit
exit
fclose
fgets
fopen
fprintf
fputc
fputs
fread
free
fwrite
getenv
malloc
memcpy
memset
printf
putchar
puts
signal
sscanf
strlen
vfprintf
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 50KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE