Static task
static1
Behavioral task
behavioral1
Sample
d2b9dc6d3b331c17ec9286743f7ae868_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d2b9dc6d3b331c17ec9286743f7ae868_JaffaCakes118
-
Size
151KB
-
MD5
d2b9dc6d3b331c17ec9286743f7ae868
-
SHA1
7b9d605bf7dd4d8a368ce584f54f66573c04f542
-
SHA256
3519147af3748d94a02a76e43b86cd20740b08f819d64e36ae497dd5ac03fe3b
-
SHA512
7b956db5ded099cec018c61e48baaef022024cc097d7ea7e841f2313d54a805e3335f1f5afbf3a51370db8dcfa7793e9513b30f562ee68308813531542cb6190
-
SSDEEP
3072:WBNhOvgAKe7zblFFJLzoZNMZdlxM/SxAzgz:WBNhEgAX7z/H/oLmdluaWo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2b9dc6d3b331c17ec9286743f7ae868_JaffaCakes118
Files
-
d2b9dc6d3b331c17ec9286743f7ae868_JaffaCakes118.exe windows:4 windows x86 arch:x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ