Static task
static1
Behavioral task
behavioral1
Sample
b581df4b36135e4090b678c8558bd278_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b581df4b36135e4090b678c8558bd278_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b581df4b36135e4090b678c8558bd278_JaffaCakes118
-
Size
155KB
-
MD5
b581df4b36135e4090b678c8558bd278
-
SHA1
71c8e909ebea08ef61cde162abd544f72260b5b7
-
SHA256
1d07937b42c3d64396ee5dba569be6e04c8d2f1f3e08d930fa547029ccd15d0b
-
SHA512
4b899de8e566483ea3d128123496ec0dbd82c38b2b0b08048d372e3898527dd34c016c212ad8f11276a874faf5143d7536198ef8b8a052fbbd1d318b83d4f507
-
SSDEEP
3072:9GQOFOFOZLc+YcTUeh9VF1pfRV5WDPujzOf9DiT7IoTs1CFMEHVbxs:9G68QcTTdfrWK/OV+T7BQeMEHs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b581df4b36135e4090b678c8558bd278_JaffaCakes118
Files
-
b581df4b36135e4090b678c8558bd278_JaffaCakes118.exe windows:4 windows x86 arch:x86
efacd904a22e4430f3ed0205b28ac96a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
HeapAlloc
HeapCreate
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_fmode
_fpreset
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
signal
wcslen
user32
MessageBoxA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE