Static task
static1
Behavioral task
behavioral1
Sample
8d1e6c0deb283c14620943004c4eedad_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8d1e6c0deb283c14620943004c4eedad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d1e6c0deb283c14620943004c4eedad_JaffaCakes118
-
Size
376KB
-
MD5
8d1e6c0deb283c14620943004c4eedad
-
SHA1
98e1116a9c4c1caa32b7ccd02d7fe35ad49e4931
-
SHA256
107a4e8895f3d50a137ac841c54fff92e6a5fbc52caf8b3c1e7c743bc7a14367
-
SHA512
26714134daec49babf78825d163b5ebed7f0969b5afb87d00d17f925ce892de691c3e7eed7a7a9b8397e06beb55954cdf8b7bd7919109e7e62fdbbc8d5a3bdf4
-
SSDEEP
6144:Tr6JFPQ0IZGytGoi10DwMkn5hbLu4Ut2FHigrVBAYNDj6JvLH3:P6A0IUroIR5VauZgYmvj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d1e6c0deb283c14620943004c4eedad_JaffaCakes118
Files
-
8d1e6c0deb283c14620943004c4eedad_JaffaCakes118.exe windows:4 windows x86 arch:x86
8bbdcd96c489d8a8c981a76269f03b11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
gethostbyname
advapi32
AdjustTokenPrivileges
GetUserNameA
RegQueryValueExA
kernel32
AddAtomA
CompareStringA
CreateFileA
EndUpdateResourceW
EnumTimeFormatsW
ExitProcess
FindAtomA
FindFirstFileA
FindResourceA
FormatMessageW
GetAtomNameA
GetCommandLineA
GetExitCodeThread
GetFileAttributesA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GlobalFlags
IsBadStringPtrA
LoadResource
LocalSize
LockResource
SetConsoleMode
SetUnhandledExceptionFilter
SizeofResource
SleepEx
UnlockFile
VerifyVersionInfoW
VirtualProtect
VirtualQuery
lstrcmpA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
signal
strstr
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 104B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 355KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 32B
IMAGE_SCN_MEM_DISCARDABLE
/19 Size: 512B - Virtual size: 171B
IMAGE_SCN_MEM_DISCARDABLE
/35 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE
/47 Size: 1024B - Virtual size: 642B
IMAGE_SCN_MEM_DISCARDABLE
/61 Size: 512B - Virtual size: 443B
IMAGE_SCN_MEM_DISCARDABLE
/73 Size: 512B - Virtual size: 116B
IMAGE_SCN_MEM_DISCARDABLE
/86 Size: 512B - Virtual size: 397B
IMAGE_SCN_MEM_DISCARDABLE
/97 Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_DISCARDABLE