Static task
static1
Behavioral task
behavioral1
Sample
777599306cb0df83c891d20ee47a9fa3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
777599306cb0df83c891d20ee47a9fa3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
777599306cb0df83c891d20ee47a9fa3_JaffaCakes118
-
Size
398KB
-
MD5
777599306cb0df83c891d20ee47a9fa3
-
SHA1
ce88176dbdbb95430e4b1b1c69d232b0a35cae39
-
SHA256
0225e9e7607dafc61af6f5151c2365feab0e908a597fe9a083275b9a81c342ff
-
SHA512
cbffe38c0278f0b5feb2dc464d12e3cf1d907c93abb743f73139988f29ed5bc1b1c0e897c36786c6c1a305a706a5ac422755f6eb9e760d0134f35e6612169514
-
SSDEEP
12288:/Nvhh1A42/mBVEHLzQJe/e7v68BngpmYApJn8sCd:bfwYpngUYKJe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 777599306cb0df83c891d20ee47a9fa3_JaffaCakes118
Files
-
777599306cb0df83c891d20ee47a9fa3_JaffaCakes118.exe windows:4 windows x86 arch:x86
c591c17f162b02b9ee9e3731ef06b587
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
HeapCreate
GlobalAlloc
GlobalFree
LocalAlloc
HeapDestroy
OpenProcess
VirtualProtect
TerminateProcess
LoadLibraryW
InterlockedDecrement
VirtualAlloc
WaitForSingleObject
GetSystemDirectoryA
GetUserDefaultLCID
LoadLibraryA
SetEvent
CompareStringW
GetDriveTypeW
msvcrt
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
printf
_initterm
_pctype
_strnicmp
malloc
_wcsicmp
__setusermatherr
_acmdln
time
_except_handler3
free
_adjust_fdiv
__mb_cur_max
__p__fmode
??2@YAPAXI@Z
rand
__wgetmainargs
??3@YAXPAX@Z
__getmainargs
fputs
_stricmp
realloc
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ