Static task
static1
Behavioral task
behavioral1
Sample
d1c49bcea36b66b1bffa0ce4272630f9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d1c49bcea36b66b1bffa0ce4272630f9_JaffaCakes118
-
Size
1.6MB
-
MD5
d1c49bcea36b66b1bffa0ce4272630f9
-
SHA1
fc678e466c1642edcea560ed5e96ba15b14183fb
-
SHA256
58995e04a3b437a5ca0d078d5a941d31e595d064878b13c9dd947c56ac97cf1c
-
SHA512
a11615a6b999d6c4209f641f3810e12e2624894e17218a13c91409da5b794b0ea947ecf885d29c3ab5711335cfb0598f23d5461cba749cae1769e325715a4134
-
SSDEEP
49152:kkfiCZ6237snE4Z6237snEnqQo1DU3dMOPff:kkfiCJ8E4J8EnJo1DAMOPH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1c49bcea36b66b1bffa0ce4272630f9_JaffaCakes118
Files
-
d1c49bcea36b66b1bffa0ce4272630f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE