Static task
static1
Behavioral task
behavioral1
Sample
b100732bcf98a4f5c92d7021168fb675_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b100732bcf98a4f5c92d7021168fb675_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b100732bcf98a4f5c92d7021168fb675_JaffaCakes118
-
Size
92KB
-
MD5
b100732bcf98a4f5c92d7021168fb675
-
SHA1
cdb5731787406e984be861cda53e9116aa00d648
-
SHA256
423d13b3bfeff9791ce757d4980a20b5dabb551f5c34a37e118b9ebba81576dc
-
SHA512
16c8faa945bd019af205afe251e3aaecd4524ecf0cf7aed6e282878c24ece6512df6c002bc088ed7e0f813e1a8e7912b19c47872910e2770ffc55280af92e885
-
SSDEEP
768:3ReUy0ynuSFgfy3WBBjSyP3MTKfL6goDEcLqgIjbKkTte1:AUzHtyGBZj2KOgoOgYbPBe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b100732bcf98a4f5c92d7021168fb675_JaffaCakes118
Files
-
b100732bcf98a4f5c92d7021168fb675_JaffaCakes118.exe windows:4 windows x86 arch:x86
4dba7dc63aed783d103108baae432f82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord537
ord354
ord5186
ord665
ord1200
ord3180
ord858
ord800
ord1168
ord1979
ord825
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
_exit
__getmainargs
_acmdln
exit
_XcptFilter
kernel32
FindResourceA
GetModuleHandleA
GetTickCount
GetTempPathA
SizeofResource
LoadResource
GetStartupInfoA
advapi32
RegCreateKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
shell32
ShellExecuteA
msvcp60
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ