Static task
static1
Behavioral task
behavioral1
Sample
93e03b98e7c90acddfe3e9468fc11c46_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
93e03b98e7c90acddfe3e9468fc11c46_JaffaCakes118
-
Size
866KB
-
MD5
93e03b98e7c90acddfe3e9468fc11c46
-
SHA1
9125e703f532fd5831c4f0446c459917c6156acf
-
SHA256
49d4045719ae9d1f01d2032c7657581df9f8abd9166d736ffc74eba6d9a3678b
-
SHA512
ddfa5e9768af18fb35b1cdb59dbdb8be7f626273558156d8345908ff4e00402d2c93323e581dbe43c0eb58b19e0b0304413d7ccee2a0b4217a40bcae2070ec9b
-
SSDEEP
12288:EQHqBs35scKQ6FMr8FRTwaMU/9GKup/SK1cHIJYzsl2WULsoweaVEKDxgwd+u4:EoyHJQ6U8FtfupkHIFxesLeaG6ku4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93e03b98e7c90acddfe3e9468fc11c46_JaffaCakes118
Files
-
93e03b98e7c90acddfe3e9468fc11c46_JaffaCakes118.exe windows:4 windows x86 arch:x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 713KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE