Static task
static1
Behavioral task
behavioral1
Sample
0038a60cfc9de693373656537d078fd1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0038a60cfc9de693373656537d078fd1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0038a60cfc9de693373656537d078fd1_JaffaCakes118
-
Size
133KB
-
MD5
0038a60cfc9de693373656537d078fd1
-
SHA1
deca935f16cb58944c79cf38c0a7f6e724af6a16
-
SHA256
b5e027230fc9f97dab9b5aef48f07bb6005188323e85dc3acaec7c46b00ea7be
-
SHA512
c4eddb13c8919282018e619df87d1cd6d3b37ded3f5e15ea98aa5ddd5b69787951c3a042eb1d531277769e8adc4d5635b6249ef28e82c7ad651c5eb947cdc992
-
SSDEEP
3072:4j0u3M5dt2bNyhKGaS7zd1au9gAndqWkiytkxx:4ZDY3z3LiAndqWkA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0038a60cfc9de693373656537d078fd1_JaffaCakes118
Files
-
0038a60cfc9de693373656537d078fd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
fef1e843d1f904149feeb530f7002e3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
CloseHandle
lstrlenA
GetLocalTime
GetTickCount
WriteFile
SizeofResource
CreateFileA
LoadResource
FindResourceA
GetModuleHandleA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
MoveFileA
LockResource
DeleteFileA
GetSystemDirectoryA
GetModuleFileNameA
CopyFileA
Sleep
CreateThread
WinExec
ExitProcess
GetFileAttributesA
GetWindowsDirectoryA
LoadLibraryA
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetProcAddress
msvcrt
_onexit
__dllonexit
exit
fopen
fwrite
fclose
??2@YAPAXI@Z
_strrev
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 672B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 32B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ