Static task
static1
Behavioral task
behavioral1
Sample
ff96b89d9d1cb8820c131e133a8e17ad_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff96b89d9d1cb8820c131e133a8e17ad_JaffaCakes118
-
Size
384KB
-
MD5
ff96b89d9d1cb8820c131e133a8e17ad
-
SHA1
cc05055a4441b50dfd2f65a0288c3850b0c34372
-
SHA256
28e30fc15d62c1727293b8056aa790dbfc985be516f0e0617d4628f3b62b2bb8
-
SHA512
1672f494e7ae93dc31a199886253075a1d0b400ffa8f34adac62df4fda3ddd16671b24cbac181ce162c2a7685acbb2444cc9cc23e6c3da23250dce563791f083
-
SSDEEP
6144:+sTyw70QslR5B/jHocBMP/MOKV3Q0j0SNUQ+p/3xAz1Dc6rGN0fiUcA:+sT4B/scBMPDqlNj+p/iFc6k0fVcA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff96b89d9d1cb8820c131e133a8e17ad_JaffaCakes118
Files
-
ff96b89d9d1cb8820c131e133a8e17ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ