Static task
static1
Behavioral task
behavioral1
Sample
964bfab43d1866f6daf88919366fdd09_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
964bfab43d1866f6daf88919366fdd09_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
964bfab43d1866f6daf88919366fdd09_JaffaCakes118
-
Size
151KB
-
MD5
964bfab43d1866f6daf88919366fdd09
-
SHA1
4b09d7f66059ae9ceb47c5d1cc0186b920a83fe2
-
SHA256
fca25c4af04fdfc939d4a7cb5e5bba7cc086105939726420d73ada3765c54d5f
-
SHA512
f13ea79e028a26c4bb65cd0e9d3a7c86dfcf84eb81ebb01f126a32c3fab3e3052db9a8c8d515f6fefb98c5a4b6706c6319478f57dcdb60f37b774520e12cc0d2
-
SSDEEP
3072:/iFyPXOnXkGdTPi17HHYm4YFclkLGn2+/xtEP:BX+XkGdC7HYDYF6k62+/xG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 964bfab43d1866f6daf88919366fdd09_JaffaCakes118
Files
-
964bfab43d1866f6daf88919366fdd09_JaffaCakes118.exe windows:4 windows x86 arch:x86
9456f572ac1b217ba263df74b12f661a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CompareStringA
CreateDirectoryA
CreateEventA
CreateFileA
CreateThread
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FlushConsoleInputBuffer
GetCommandLineA
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetCurrentDirectoryA
GetFileSize
GetFullPathNameA
GetLastError
GetLogicalDrives
GetModuleFileNameA
GetProcessHeap
GetStdHandle
GetTickCount
HeapAlloc
HeapFree
MultiByteToWideChar
PeekConsoleInputA
ReadConsoleInputA
ReadFile
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetConsoleTitleA
SetConsoleWindowInfo
SetEvent
SetFilePointer
SetLastError
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile
user32
GetMessageA
PeekMessageA
PostThreadMessageA
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 203KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE