Static task
static1
Behavioral task
behavioral1
Sample
94ef03fda5fffac2cfcaaeb625a24c5d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
94ef03fda5fffac2cfcaaeb625a24c5d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94ef03fda5fffac2cfcaaeb625a24c5d_JaffaCakes118
-
Size
1.3MB
-
MD5
94ef03fda5fffac2cfcaaeb625a24c5d
-
SHA1
eaf188df097ed29921de4ad3ddad020758107a47
-
SHA256
6fea44a214a531d1c6c6387e107724f35e94d2f95fb95021300ca1977951f166
-
SHA512
38272e0330c42b3f627953c61a6f97884d0d46ed76b9e8235037b8a67ff312a5c312239c36c349b9ed5d1fb2bfde3ffea5a370ab8e52307600be2d175ce06134
-
SSDEEP
24576:H4vtfRaC5I81S0p0F1L8FQq3ks/By5wYaQDy6KnHa8bmSnlMHEDbC:H4vtfR95IKmF1L8FQqx05OpH9N20C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94ef03fda5fffac2cfcaaeb625a24c5d_JaffaCakes118
Files
-
94ef03fda5fffac2cfcaaeb625a24c5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
6c353bcfc458c52fae0e2898e64a4cde
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
GetFileTime
GetCommandLineA
OpenFileMappingA
FindAtomA
SetLastError
DeleteAtom
CreateThread
CopyFileW
Sleep
GetStdHandle
ReadFile
ReadConsoleA
CopyFileExW
FindAtomA
DeleteFileW
GetFileSize
ReadFile
GlobalFree
GetConsoleMode
WriteFile
GetFileTime
OpenFileMappingA
GetLastError
ExitThread
OpenFile
CreateDirectoryA
CopyFileA
CreateThread
GetFileSize
OpenFile
GlobalFree
SetLastError
GetLastError
CopyFileW
GetConsoleMode
ExitThread
OpenFileMappingA
DeleteFileA
CopyFileExW
CopyFileA
GetCommandLineA
WriteFile
GetCPInfo
DeleteAtom
OpenFileMappingA
GetFileTime
CreateDirectoryA
GetFileSize
GlobalFree
OpenFile
ReadFile
GetCPInfo
CopyFileExW
WriteFile
CopyFileA
GetComputerNameA
CreateThread
GetLastError
GetConsoleMode
SetLastError
Sections
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 24KB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 227B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ