Static task
static1
Behavioral task
behavioral1
Sample
b01674d7cbce5ba092faa36a2a7b09f5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b01674d7cbce5ba092faa36a2a7b09f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b01674d7cbce5ba092faa36a2a7b09f5_JaffaCakes118
-
Size
108KB
-
MD5
b01674d7cbce5ba092faa36a2a7b09f5
-
SHA1
3dbda3c30e66c564928cbc0fc0237cbb38e6ef82
-
SHA256
9d3325763e1cbabc93708fe2ae9351b0190339e5eff113ef1283923be1737129
-
SHA512
e1f82b8055bbf2fedd2cb22877903b4023e725f4c73ce94de10c90013f185cf01b78e0d8b772c6d6f7212b08f2b598c25bf137dde814307a992104b2c3743187
-
SSDEEP
1536:sWimOTB0TKdbZZhP+GDuQ2laCxQycF56AqeOv9dml:sWimqB0TKdbZZhP+GDuQ2laCxQh56H0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b01674d7cbce5ba092faa36a2a7b09f5_JaffaCakes118
Files
-
b01674d7cbce5ba092faa36a2a7b09f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
2537aa60e84fac07cc2e27f2f307a870
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord4202
ord540
ord690
ord1988
ord939
ord5207
ord6663
ord6385
ord353
ord1105
ord3790
ord941
ord1575
ord4129
ord6648
ord2614
ord858
ord2763
ord356
ord2770
ord2781
ord4058
ord3181
ord924
ord1980
ord668
ord823
ord354
ord825
ord665
ord537
ord535
ord2818
ord800
ord815
ord389
ord561
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_memicmp
__setusermatherr
_initterm
__getmainargs
__p___initenv
_XcptFilter
_onexit
__dllonexit
exit
__CxxFrameHandler
_exit
_stricmp
kernel32
GetModuleHandleA
GetCommandLineA
lstrcatA
GetSystemDirectoryA
lstrcmpA
lstrlenA
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
lstrcpyA
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
CopyFileA
user32
wsprintfA
advapi32
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
msvcp60
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
netapi32
Netbios
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ