Static task
static1
Behavioral task
behavioral1
Sample
87830ed75fdac8e81bdf37b15b119969_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
87830ed75fdac8e81bdf37b15b119969_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87830ed75fdac8e81bdf37b15b119969_JaffaCakes118
-
Size
24KB
-
MD5
87830ed75fdac8e81bdf37b15b119969
-
SHA1
2f66f6d1328db50bf05ad9f501de5859d7d63fc1
-
SHA256
6a9ed460bf3f44aaf9c48ef877dc62553da03271c08e7d164e6554c16943b4ad
-
SHA512
10ec2445c9298727eac21c3e5d1ddfe17430a56f71a4d7e57fcdd8f1c3651f79624a37936d5928bd0a124e44942f262ba5df28b59d541d79ad1e98e13d4f4b83
-
SSDEEP
384:GvRoRo6eRva9EvdoPQzI5bv0xDOBW17u:GvRcoVva9EvGPKUbvIOm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87830ed75fdac8e81bdf37b15b119969_JaffaCakes118
Files
-
87830ed75fdac8e81bdf37b15b119969_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab2b036ffd64ce5eaebd8e6782ccce6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
CloseHandle
CreateProcessA
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA
msvcrt
isspace
ispunct
isprint
islower
isgraph
isdigit
isalpha
isalnum
div
ceil
isupper
rand
srand
time
__CxxFrameHandler
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
_except_handler3
atol
_access
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
isxdigit
sprintf
_itoa
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ