Static task
static1
Behavioral task
behavioral1
Sample
b9c082bffd9d6dd98b8a02c69015bf17_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9c082bffd9d6dd98b8a02c69015bf17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9c082bffd9d6dd98b8a02c69015bf17_JaffaCakes118
-
Size
2.1MB
-
MD5
b9c082bffd9d6dd98b8a02c69015bf17
-
SHA1
ca09d12f1727440fbf1421595915b07a1f2fe22c
-
SHA256
aee4e55a983d883e88f4a2a62d389d44761e45ca2de9e651a4e3866371109f7b
-
SHA512
6d1f9afaee469540f6a867f9b4f4eb24dc0c2631f3abef6c3e7782b3a8dbbd52031c8e35d6adb10c4752168a1675eaa66771489a8168cd3d3ee062daf0acae1e
-
SSDEEP
49152:yZH6EO4rZHYGILDcO/fsBmLjRw6qpZmBZWyLaXMXWaU:yt6EO4rtYGUQO/fsiR6vmBNLfmF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9c082bffd9d6dd98b8a02c69015bf17_JaffaCakes118
Files
-
b9c082bffd9d6dd98b8a02c69015bf17_JaffaCakes118.exe windows:4 windows x86 arch:x86
b187f433281e36231fb2e7054a7b6aa3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetFileAttributesA
GetLastError
IsDBCSLeadByteEx
MultiByteToWideChar
SetUnhandledExceptionFilter
msvcrt
_access
_chdir
_chmod
_close
_creat
_fdopen
_isatty
_mktemp
_open
_pclose
_popen
_read
_rmdir
_setmode
_utime
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_access
_assert
_cexit
_chmod
_errno
_filbuf
_filelengthi64
_findclose
_findfirst
_findnext
_flsbuf
_fstati64
_fullpath
_iob
_isctype
_lseeki64
_mkdir
_onexit
_pctype
_setmode
_stati64
_unlink
abort
atexit
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fread
free
fsetpos
fwrite
getenv
gmtime
iswctype
localtime
malloc
memchr
memcpy
memset
perror
printf
putchar
puts
raise
realloc
rename
setbuf
signal
sprintf
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strrchr
system
time
tolower
vfprintf
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ