Static task
static1
Behavioral task
behavioral1
Sample
d1242fec16e473d23e96ca9f9c6c5bd5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1242fec16e473d23e96ca9f9c6c5bd5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1242fec16e473d23e96ca9f9c6c5bd5_JaffaCakes118
-
Size
191KB
-
MD5
d1242fec16e473d23e96ca9f9c6c5bd5
-
SHA1
3a102d7a497c7f0d4536d903e608adbedb7776c0
-
SHA256
93352c3cb101816e9e99389454e9b5460f266748282e3406177e3c5f75405d64
-
SHA512
27a5de6ec939426824ee63b9c92de29cd4010928890ddcdeabaf1ecbb8144af3a1f4b35faebf6cb5ccd9fce528137e4d3a8106a455071a4e5b98706246a945d2
-
SSDEEP
3072:wVKF9yhhlCmz62nAwOd4aBeGMwThs9SIBk/prIwzlrGA:e24zfXY4dGPTGgIb0n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1242fec16e473d23e96ca9f9c6c5bd5_JaffaCakes118
Files
-
d1242fec16e473d23e96ca9f9c6c5bd5_JaffaCakes118.exe windows:1 windows x86 arch:x86
72182fa57003e6b09835ac84bba7ae37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GlobalUnlock
GetCurrentProcess
GetDateFormatA
CreateThread
LCMapStringW
GetStartupInfoA
GetComputerNameW
GetSystemDirectoryW
SetFilePointer
lstrcpynA
GetConsoleCP
GetCurrentDirectoryW
SizeofResource
GetVersionExA
GetCommandLineA
TlsAlloc
HeapCreate
SearchPathA
GetModuleHandleA
OpenEventA
msvcrt
__setusermatherr
vfwprintf
_wputenv
exit
_flsbuf
_XcptFilter
__p__fmode
_ctype
_exit
is_wctype
_wtol
_time64
strftime
__getmainargs
_safe_fdivr
_except_handler3
_fgetchar
_snwscanf
_sys_nerr
_spawnl
_acmdln
_read
memcpy
puts
_controlfp
_initterm
_atoi64
_wfullpath
_wexecvp
_wexeclpe
__set_app_type
_adjust_fdiv
_memicmp
printf
_cputws
fprintf
__p__commode
perror
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ