Static task
static1
Behavioral task
behavioral1
Sample
dcbaa750a17b582341277a065ebaa410_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcbaa750a17b582341277a065ebaa410_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcbaa750a17b582341277a065ebaa410_JaffaCakes118
-
Size
59KB
-
MD5
dcbaa750a17b582341277a065ebaa410
-
SHA1
2cbac519f997ebbabfb07fab8bd0ed3e2afc63e3
-
SHA256
66ff3886e5d6102db3350e1335420703e8231cffd5b5859737baed926f2dc9dc
-
SHA512
a00d5780637578c538627ddebff3c5e6508652b277ec3657492a4a293da5db9b5ba87d6d2eb47697e310798b97cbfdda8d1efc97c8c5ed8b5d655e88127060b1
-
SSDEEP
768:GL0L2xnu9sBw1JtLSqD3Nkwjy18LSzD3Nhwjy1j:G+9sBw1JhSa3r2eSH3E2x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcbaa750a17b582341277a065ebaa410_JaffaCakes118
Files
-
dcbaa750a17b582341277a065ebaa410_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
putos Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
todos Size: - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
los Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
anti Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
@irus Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE