Static task
static1
Behavioral task
behavioral1
Sample
d29893f6a18a513e5023a6c0c70e76af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d29893f6a18a513e5023a6c0c70e76af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d29893f6a18a513e5023a6c0c70e76af_JaffaCakes118
-
Size
7KB
-
MD5
d29893f6a18a513e5023a6c0c70e76af
-
SHA1
baaa69f563e687c3b33ebd93245581f0dedadde8
-
SHA256
77d052a6529a4a2421b17aa558655e4b8d5f7c28d00b4b643d924f2e716c75a1
-
SHA512
8eee8f8d5e95ecbd158ac579229b9b9bb62247b31a1d0add16471e053f1c9c4bbdc0ffdc36f68bfb397a42da134fcae7b4a370f5d82d5ae912260036065c2fd9
-
SSDEEP
96:qWg9UgQ19mPXBJVP7wWRaSvQv/j2AMwRERDO8bX6uvBm0glmpEc7XvoYi:5gQ1yBJBwiaSQKRAYJTpzXvoY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d29893f6a18a513e5023a6c0c70e76af_JaffaCakes118
Files
-
d29893f6a18a513e5023a6c0c70e76af_JaffaCakes118.exe windows:4 windows x86 arch:x86
6597f2a970251181104935df5e411237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CloseHandle
CreateDirectoryA
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentDirectoryA
GetLastError
OpenProcess
ReadProcessMemory
SetUnhandledExceptionFilter
msvcrt
_strdup
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
_snprintf
abort
atexit
atoi
fclose
fopen
fprintf
free
fwrite
malloc
printf
signal
strchr
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE