Static task
static1
Behavioral task
behavioral1
Sample
f0935025b4d918003fe97461d9bf3a48_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f0935025b4d918003fe97461d9bf3a48_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0935025b4d918003fe97461d9bf3a48_JaffaCakes118
-
Size
94KB
-
MD5
f0935025b4d918003fe97461d9bf3a48
-
SHA1
d3f56acc36abbdb99395a8f7da7b8de0037e46ea
-
SHA256
842a355cce2e9e408490fd965eb30cfdb1b45386c8c0833c20ed6cfd057929e5
-
SHA512
ca77900d884c3e9e5ea58b80038e140d53edea6b2eea95168dbd341f40d74b468794a8fcb4c9c781442fe4bca92ecf123e43b09f1c22143e939b82df242dc2e7
-
SSDEEP
1536:1Pknj1iP0sSA0U1RxPqzf2u5lNGYkSBC/z4toaf1000:1SBVVA0U1/Bu5/Lk/zcf1n0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0935025b4d918003fe97461d9bf3a48_JaffaCakes118
Files
-
f0935025b4d918003fe97461d9bf3a48_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8fa6dc3ba52b1178d2b0b9ddd24761e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpW
GetFileAttributesW
lstrcmpiW
LoadLibraryW
GetProcAddress
FreeLibrary
MultiByteToWideChar
GetModuleFileNameW
InterlockedIncrement
lstrcpynA
lstrcmpA
SetCurrentDirectoryW
GetLastError
CloseHandle
WaitForSingleObject
CreateProcessW
GetCurrentProcessId
GetTickCount
GetACP
LocalAlloc
InterlockedExchange
RaiseException
LoadLibraryA
LocalFree
GetCurrentDirectoryW
OutputDebugStringW
lstrlenW
lstrcmpiA
lstrcpyW
WideCharToMultiByte
InterlockedDecrement
ole32
PropVariantClear
CoTaskMemFree
CLSIDFromString
CoCreateInstance
oleaut32
VariantInit
Sections
.text Size: 50KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ