Static task
static1
Behavioral task
behavioral1
Sample
02976b1fcd9b763b97a7b78f5fa7a65a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02976b1fcd9b763b97a7b78f5fa7a65a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02976b1fcd9b763b97a7b78f5fa7a65a_JaffaCakes118
-
Size
164KB
-
MD5
02976b1fcd9b763b97a7b78f5fa7a65a
-
SHA1
a2f3b8499cd0d03e77c756298b3bd468dc036a26
-
SHA256
58f16bbbc810bd93cdcd45c1913aa4c1852c7d24e3fbd42bd8c2a1764e436149
-
SHA512
94c26ff350e89eec0cc3f237ecf6968d6965679e82ac67b422c7027b31560a36012872bf4f7cd4b48596d12c09073220b92c5dddc9b5d13a2d68866efa41051e
-
SSDEEP
3072:IHaZ0JKZWxhPSNNGJl1uloUuclPgc0z6Yt3T0FZYIiKy:8dZhD1lFlxT0/YIiKy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02976b1fcd9b763b97a7b78f5fa7a65a_JaffaCakes118
Files
-
02976b1fcd9b763b97a7b78f5fa7a65a_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.uf3B Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.R67W Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pAeS Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE