Static task
static1
Behavioral task
behavioral1
Sample
b1069f7085b62cc024b4de9518f0acd9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b1069f7085b62cc024b4de9518f0acd9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1069f7085b62cc024b4de9518f0acd9_JaffaCakes118
-
Size
101KB
-
MD5
b1069f7085b62cc024b4de9518f0acd9
-
SHA1
a41b0c9270bc18048b9b8ceb6c1227567ea01703
-
SHA256
ef8b5595808021dff2f1013a0b06275945021a7e871e6776c48523e950e01d4f
-
SHA512
69025ac9126165242739f7bdf8900457d0ca08d892bae0b89047ce97a17b3e96e7a4004e2a9e338c534a0736fab57703ec59f3cc45725c1b6d8908ac4200c0c7
-
SSDEEP
3072:os4e8rFbYZIQ+iwcg0sTakc6HzqxyDc6HcT66vlmrJcnHV1EEgHpbH:osCbYZLbwr0Makc6HexyDc6HcT66vlmB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1069f7085b62cc024b4de9518f0acd9_JaffaCakes118
Files
-
b1069f7085b62cc024b4de9518f0acd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
eb0f7491da92625976388068a9c43ca7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
kernel32
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
CopyFileA
InterlockedIncrement
ReleaseMutex
CreateMutexA
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
lstrcatA
lstrcpyA
lstrlenA
msvcrt
_write
_fileno
_fstat
_isatty
_lseek
_open
_read
_close
_assert
_cexit
_errno
_fileno
_fmode
_fpreset
_HUGE
_iob
_setmode
__getmainargs
abort
atexit
exit
fclose
fflush
fprintf
fread
free
fseek
fwrite
getc
isspace
isupper
__p__environ
malloc
memchr
memcpy
memmove
memset
signal
strcat
strcmp
strlen
strstr
strtol
strtoul
__set_app_type
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ