Static task
static1
Behavioral task
behavioral1
Sample
c85815817f03c9648f111e10001ee5a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c85815817f03c9648f111e10001ee5a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c85815817f03c9648f111e10001ee5a1_JaffaCakes118
-
Size
300KB
-
MD5
c85815817f03c9648f111e10001ee5a1
-
SHA1
52a7a8e98300cfe0ad2354c78f6624a360e70ee3
-
SHA256
c59e619b484dfc55304c7f882d1f194cd4b9143151ff6652de96e9f0395f0c0b
-
SHA512
14906c3d83c77fc87217f7415146139b0fbbca482798258a485f10d70026108085758d315010589bd87f84033838293f7e3b17c7d0357432360bc5aa22bebc6f
-
SSDEEP
6144:b9gL+PCiz/Jqa7Ak9niblzHGzeBNRugHpVwtPx1+JA:GL+PCQqrkAblzHGyfRXHzCf+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c85815817f03c9648f111e10001ee5a1_JaffaCakes118
Files
-
c85815817f03c9648f111e10001ee5a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
10a63a1eabd1d0a7dd786419cb884c66
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
__set_app_type
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
memcpy
??2@YAPAXI@Z
atoi
_except_handler3
strcmp
strlen
malloc
strcpy
kernel32
LoadResource
VirtualQueryEx
VirtualAllocEx
VirtualAlloc
GetStartupInfoA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FindResourceA
Sleep
LockResource
OpenMutexA
CreateMutexA
SizeofResource
GetModuleFileNameA
msvcp60
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bin Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE