Static task
static1
Behavioral task
behavioral1
Sample
f711a8a4b63f0b12274b462f526d8825_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f711a8a4b63f0b12274b462f526d8825_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f711a8a4b63f0b12274b462f526d8825_JaffaCakes118
-
Size
675KB
-
MD5
f711a8a4b63f0b12274b462f526d8825
-
SHA1
104b898fa039152431fa4240cf8ee026030c37f5
-
SHA256
551fd404ca34bd006e0607247741f1cd233a81bd5cbec3d9cff420d965b7dd05
-
SHA512
addb1b6095b629d3aafa608925b610107a7a4837ec8629cbbe46fa118f2f3a68bbd8f2636fa6f3447c33de940d768b0556665648766f65794feb4f41ab019ebc
-
SSDEEP
3072:5D3sOrIBvBxXnAZZywdydSKvxW6j9fVv5SitTBfrrIgk1:57sOEBHXNwIdNvxJjrv5SitTBTrIgk1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f711a8a4b63f0b12274b462f526d8825_JaffaCakes118
Files
-
f711a8a4b63f0b12274b462f526d8825_JaffaCakes118.exe windows:4 windows x86 arch:x86
9508a93784d289d112912bb89ccb4006
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetAtomNameA
OpenEventW
SetPriorityClass
OpenMutexA
SetFilePointer
CreateFileA
RemoveDirectoryA
SystemTimeToFileTime
SetEnvironmentVariableA
ResetEvent
CreateDirectoryW
SetHandleCount
GetCurrentDirectoryA
SetCurrentDirectoryA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
user32
CloseDesktop
GetDC
DrawIconEx
SetWindowLongA
CreateIcon
mfc42
ord823
msvcrt
??1type_info@@UAE@XZ
_controlfp
_exit
vprintf
toupper
iswspace
_onexit
memcpy
_ftol
_CxxThrowException
_purecall
malloc
free
__CxxFrameHandler
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ