Static task
static1
Behavioral task
behavioral1
Sample
d14ccb6207dc61ebc415ccb3ec904ead_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d14ccb6207dc61ebc415ccb3ec904ead_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d14ccb6207dc61ebc415ccb3ec904ead_JaffaCakes118
-
Size
20KB
-
MD5
d14ccb6207dc61ebc415ccb3ec904ead
-
SHA1
d7f25bc233b3dabf65823f902f59230039ce2c88
-
SHA256
96a9ec32104f3cf3445d5a6949211052018461979032c4df9efd23c13f2c3737
-
SHA512
239560b6a759b9c0513af7756fcf482d4fe343c58f741bf91629a87dce16c6a38f935cdb5206a0745a88d8bceba963217bd09e3c2fce54e5c83c6991941088be
-
SSDEEP
384:+QQZtKPcHHCCKZeTXXOq2nHeWYg63Fj+GpRIoRvmNua:+v/KLlwX+WWYRswZvm1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d14ccb6207dc61ebc415ccb3ec904ead_JaffaCakes118
Files
-
d14ccb6207dc61ebc415ccb3ec904ead_JaffaCakes118.exe windows:4 windows x86 arch:x86
bcf667b48ba2136415d9363bde2d832c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteFileA
CopyFileA
WinExec
GetCurrentDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
FindClose
lstrcmpA
FindNextFileA
FindFirstFileA
CreateMutexA
lstrcpyA
GetLogicalDriveStringsA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDrives
SetFileAttributesA
MoveFileA
GetFileAttributesA
CreateDirectoryA
GetProcAddress
LoadLibraryA
GetLocalTime
GetTempPathA
GetWindowsDirectoryA
ExpandEnvironmentStringsA
GetLastError
CloseHandle
CreateThread
lstrcatA
Sleep
user32
GetWindowTextA
GetParent
WindowFromPoint
GetCursorPos
MessageBoxA
PostMessageA
advapi32
RegCloseKey
RegEnumKeyA
RegCreateKeyA
RegDeleteKeyA
msvcrt
_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
??2@YAPAXI@Z
exit
fclose
fputs
sprintf
fopen
strstr
printf
fwrite
fread
fseek
rand
srand
time
fgets
_exit
__p__commode
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
ws2_32
gethostbyname
gethostname
WSACleanup
WSAStartup
Sections
.text Size: 17KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ