Static task
static1
Behavioral task
behavioral1
Sample
d4601e311d6dc7c9a201da16302cda93_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4601e311d6dc7c9a201da16302cda93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4601e311d6dc7c9a201da16302cda93_JaffaCakes118
-
Size
66KB
-
MD5
d4601e311d6dc7c9a201da16302cda93
-
SHA1
76b5e4772a936910e711d9c6c77aab8bdb6e2e75
-
SHA256
20865e87ba8309db0bb7bda2342c7f5c0d72a7a50162c65eb0eb18469b72faff
-
SHA512
eb276f48c20513016054eda0898d0659df3ab575607c7d1287cb3805ff71311b5ad6bf1c4401e5da8269080e3416389e694f2743305aa1e4ae739c142b8b6919
-
SSDEEP
768:z55uaCxt73FVj6FR0ISa0ngezXXlHdYqnSTGeu4T8xhyUoHxMHSXc:zP10hPasgezHhCqnSTGeuGmhOHxMH1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4601e311d6dc7c9a201da16302cda93_JaffaCakes118
Files
-
d4601e311d6dc7c9a201da16302cda93_JaffaCakes118.exe windows:4 windows x86 arch:x86
080cc7a97f8a8f0640be9ffce9ed265d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetFileAttributesA
GetLastError
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_chmod
_close
_dup
_errno
_exit
_filbuf
_findclose
_findfirst
_findnext
_flsbuf
_fstati64
_fullpath
_iob
_isatty
_isctype
_lseeki64
_onexit
_open
_pctype
_read
_setmode
_stati64
_unlink
_utime
_write
atexit
atoi
calloc
exit
fflush
fprintf
fputc
free
fwrite
getenv
localtime
malloc
memcpy
memmove
memset
perror
printf
putchar
puts
raise
realloc
signal
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strrchr
strspn
tolower
vfprintf
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE