Static task
static1
Behavioral task
behavioral1
Sample
b674aa68c4b813ed169ce7898294cd7d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b674aa68c4b813ed169ce7898294cd7d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b674aa68c4b813ed169ce7898294cd7d_JaffaCakes118
-
Size
60KB
-
MD5
b674aa68c4b813ed169ce7898294cd7d
-
SHA1
1c38e5c023f658d23adf6458c0e1ae3ff6ddf03f
-
SHA256
53ff213a05a65d96377c1a50cbe5ada88d5c9bb32253923c8e94350da433a84b
-
SHA512
c6d959f39a757338daa0e4e8ad0eb957267964b01ad2bc7a157241f97a3a267055593f98251f4bfd82235e2b9d03e5810db6632c0eb9fe8dc10da4a060049623
-
SSDEEP
384:ON6/9t1Dhh2GcNUPyGeVAwTIFrUQFMYLXzR/KxXj2wHfjNjlPlZLEc:r/9t1Vh23GnoIFrUQXDR/KxtjNjN7Yc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b674aa68c4b813ed169ce7898294cd7d_JaffaCakes118
Files
-
b674aa68c4b813ed169ce7898294cd7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
9a2bc6a13a2613f98e887b6616abde30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetFilePointer
ReadFile
WriteFile
GetFileSize
CreateFileA
msvcrt
puts
exit
malloc
free
printf
_strupr
strtoul
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 634B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE