Static task
static1
Behavioral task
behavioral1
Sample
cfda539c20c2d2b2b8b803391f6e820a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfda539c20c2d2b2b8b803391f6e820a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfda539c20c2d2b2b8b803391f6e820a_JaffaCakes118
-
Size
103KB
-
MD5
cfda539c20c2d2b2b8b803391f6e820a
-
SHA1
f80de74aa959ea46c311015aba74992ef11cc5b8
-
SHA256
f47cd1ff216eabb2bc0a777f9c827c2975b69133d31570b6d8114f9cada3361e
-
SHA512
1b9ccee60b813e352b24c7930c7398775ef6688c38484ee5e5a90337a17faf6667c12288e3cdf83c161a9ebdb2ed94a009a898c8b454fedb000669ed5cd56ec8
-
SSDEEP
3072:F0+ODLbYZIhbiwcg0QaTEFXc6HjS2aUsc6HcT66vlmQ90TDyrPGvLvHjvfrH/zjo:xcbYZquwr0VTEFXc6HjdaUsc6HcT66vd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfda539c20c2d2b2b8b803391f6e820a_JaffaCakes118
Files
-
cfda539c20c2d2b2b8b803391f6e820a_JaffaCakes118.exe windows:4 windows x86 arch:x86
99ca41cfa3c0625ae66f16a64bd991ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegOpenKeyExA
RegSetValueExA
kernel32
ExitProcess
GetCommandLineA
GetDriveTypeA
GetFileAttributesA
GetLastError
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
GlobalAlloc
GlobalLock
CopyFileA
GlobalUnlock
InterlockedIncrement
ReleaseMutex
SetFileAttributesA
CreateMutexA
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
CreateThread
lstrcmpA
DeleteFileA
msvcrt
_write
_fileno
_fstat
_isatty
_lseek
_open
_read
_close
_assert
_cexit
_errno
_fileno
_findclose
_findfirst
_findnext
_fmode
_fpreset
_HUGE
_iob
_setmode
_stat
__getmainargs
abort
atexit
exit
fclose
fflush
fopen
fprintf
fread
free
fseek
fwrite
getc
isspace
isupper
__p__environ
malloc
memchr
memcpy
memmove
memset
pow
rand
realloc
signal
srand
strcat
strcmp
strcpy
strlen
strtol
strtoul
time
__set_app_type
shell32
ShellExecuteA
user32
EmptyClipboard
FindWindowA
GetForegroundWindow
OpenClipboard
PostMessageA
SetClipboardData
SetWindowTextA
CloseClipboard
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE