Static task
static1
Behavioral task
behavioral1
Sample
f715fcdc53f991fc2b23efc16d24cb58_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f715fcdc53f991fc2b23efc16d24cb58_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f715fcdc53f991fc2b23efc16d24cb58_JaffaCakes118
-
Size
185KB
-
MD5
f715fcdc53f991fc2b23efc16d24cb58
-
SHA1
2b54739e85d6b1bc770bfb147268b2903a92859a
-
SHA256
045cc47051e91f1bf7e1bb408f459b3c97fff3a1ac05285cc81dfc5f554cd1fc
-
SHA512
d44c0c83094209df10d371634f498ef3c3f7fb278190270a17bdc2ae28a6dbfc5a08d92f34c50f87ce9553b218f3ef3471fc4f7be189bb1a3a9f0461885a5a6e
-
SSDEEP
3072:HsP4LMR3o0DQ2IBFjMKFfYNAoabVXLEnE+ELUfuUk4:hUWJRIAosQnELU2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f715fcdc53f991fc2b23efc16d24cb58_JaffaCakes118
Files
-
f715fcdc53f991fc2b23efc16d24cb58_JaffaCakes118.exe windows:1 windows x86 arch:x86
8e503030f3c36a280b2c9344ee12c90d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_ungetwch
__setusermatherr
_winver
_XcptFilter
_sleep
_except_handler3
exit
_aligned_malloc
_mbsset
_mbsrchr
__p__commode
_spawnlp
__p__fmode
_fgetwchar
towlower
setbuf
iswalpha
memcpy
_getche
_wfopen
_initterm
wcschr
system
_controlfp
_adjust_fdiv
_aligned_offset_realloc
_mbsnset
__set_app_type
__getmainargs
fputws
exp
_exit
_wcsicoll
_timezone
_acmdln
_onexit
_aligned_realloc
isdigit
kernel32
HeapAlloc
SetLastError
HeapCreate
SetUnhandledExceptionFilter
LoadResource
GetProcessWorkingSetSize
GetSystemDirectoryW
FlushFileBuffers
GetCurrentDirectoryW
ResumeThread
GetStartupInfoA
lstrcatA
PulseEvent
TlsSetValue
TlsGetValue
FindResourceA
GetModuleHandleA
GetExitCodeThread
VirtualFree
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ