Static task
static1
Behavioral task
behavioral1
Sample
a96fc8432a9f8e69921bec14a1932ab1_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a96fc8432a9f8e69921bec14a1932ab1_JaffaCakes118
-
Size
413KB
-
MD5
a96fc8432a9f8e69921bec14a1932ab1
-
SHA1
a0d86d00b2f503f13ec56d7d0d2721daecdce13c
-
SHA256
99e695477fa49c36cd8aefa883231db5f63edb708e9a1c3761dfbe439ca2a062
-
SHA512
b0adeb81bad2395c02107a7c7192dc193f0d3f6b45f7aa7b27d587551778a230394e830d8c9bd48758160b8ccbe68dd9f00b103a8a2ca1215cc09ec8adaa36ac
-
SSDEEP
6144:eds9AGrKqmOhOopr4nPoW/Cu75v+oF+R6N/7ILbSH3ARO9zWCifartNocHwL+qR2:ea9AGWuOoSPoW/QRUCCifwtqcQL+yzS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a96fc8432a9f8e69921bec14a1932ab1_JaffaCakes118
Files
-
a96fc8432a9f8e69921bec14a1932ab1_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.uf3B Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.R67W Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pAeS Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE