Static task
static1
Behavioral task
behavioral1
Sample
b270e1f62841f87e53c2bc3fb4efe56f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b270e1f62841f87e53c2bc3fb4efe56f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b270e1f62841f87e53c2bc3fb4efe56f_JaffaCakes118
-
Size
59KB
-
MD5
b270e1f62841f87e53c2bc3fb4efe56f
-
SHA1
1a87e291a482dde87d5a60851d8b016d567e1cb9
-
SHA256
b4fa87eb7dcdfbf3c521f3fd150007e921e6e95667c969e3a522b20ec3b33ec0
-
SHA512
c6dc9c8b4b61b7fdd7275c285248ff97472e90b22f1b8105c0636b4bbca14d176f3a40e3367277e6783090b2f19f9409d6505f950a7bcd8fa159179faf792a2c
-
SSDEEP
1536:Y4N3U7mvZRvA9/V03t1lTOFA8G/BOT0q1NYX:tkyvZO4RTh8GpOA/X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b270e1f62841f87e53c2bc3fb4efe56f_JaffaCakes118
Files
-
b270e1f62841f87e53c2bc3fb4efe56f_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b7c8e406f1b1a3a8040a5f767e345a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
advapi32
RegOpenKeyExA
msvcrt
ftell
fseek
fopen
strcat
strcpy
calloc
_exit
_XcptFilter
fread
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fclose
exit
Sections
.rdata Size: 1024B - Virtual size: 714B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ