Static task
static1
Behavioral task
behavioral1
Sample
cddd5623ccee4f14923726e56d0a515a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cddd5623ccee4f14923726e56d0a515a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cddd5623ccee4f14923726e56d0a515a_JaffaCakes118
-
Size
112KB
-
MD5
cddd5623ccee4f14923726e56d0a515a
-
SHA1
7301cc0afa2a834f3cdd4c6853016730ed26e3fb
-
SHA256
dfbcd6020b70cb4194a604bfb5ba2b4ec39ce3c4e67a02d7561e2700800975e1
-
SHA512
3083b419deea7ddf4eede3bd7fc0b8fb77340cce9f5901db91f4de19f1217d140968b1f9dc841eec121234c395608ff773a3f4ecf3513eb36fa04fbf984de689
-
SSDEEP
768:++PiZvJID27ilMkEpD6OLrE4xuha5Oo87hkkrhqPf:mZvEIilMfBgB9zPcP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cddd5623ccee4f14923726e56d0a515a_JaffaCakes118
Files
-
cddd5623ccee4f14923726e56d0a515a_JaffaCakes118.exe windows:4 windows x86 arch:x86
206cfdcd8ebc51d6577890d071df2745
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
MapViewOfFile
CreateFileMappingA
CreateFileA
CloseHandle
UnmapViewOfFile
Sleep
SetFileAttributesA
CopyFileA
GetFileAttributesA
GetLastError
MoveFileA
GetWindowsDirectoryA
DeleteFileA
GetTickCount
WaitForSingleObject
GetModuleFileNameA
GetSystemDirectoryA
GetModuleHandleA
GetCommandLineA
FindNextFileA
FindFirstFileA
SetFilePointer
ReadFile
WriteFile
mfc42
ord404
ord823
ord3790
ord825
ord5207
ord389
ord665
ord1979
ord6385
ord353
ord800
ord939
ord540
ord561
ord815
ord2614
ord2818
ord922
ord924
ord537
ord2764
ord4202
ord535
ord5186
ord354
ord941
ord1105
ord5442
ord3318
ord1575
ord6663
msvcrt
sprintf
exit
__dllonexit
_onexit
_exit
_XcptFilter
__p___initenv
time
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
srand
rand
_except_handler3
__getmainargs
__CxxFrameHandler
msvcp60
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
Sections
������I Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FISHPEP Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE