Static task
static1
Behavioral task
behavioral1
Sample
d02b1f3b2bbd7811f856a16408181d93_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d02b1f3b2bbd7811f856a16408181d93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d02b1f3b2bbd7811f856a16408181d93_JaffaCakes118
-
Size
357KB
-
MD5
d02b1f3b2bbd7811f856a16408181d93
-
SHA1
9ba2253e2ffd3e006c2c619c522e46e6c65929c2
-
SHA256
cef7fd0e894d28b258a4de8a060074233b43dd946d24c09a1a8e9e8bc5d39425
-
SHA512
8c83c204ae74809bc17056c6cd26da321fc288621994121c31364d518e95be31ab9def6a46735c3500a4087e0ca0f132c0feeca741ae4815b8e11c8ed7e7000d
-
SSDEEP
6144:fpe764yE2z+/mItUEjcB+D9wmH66RaBPVJNnPAtYNGZ1evsy0YqiQzIU8/Qr:R+Bt2qmIeQckwxQaFV3Vieczn8/o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d02b1f3b2bbd7811f856a16408181d93_JaffaCakes118
Files
-
d02b1f3b2bbd7811f856a16408181d93_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE