Static task
static1
Behavioral task
behavioral1
Sample
031570a052f8f4679c7163cd005894e2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
031570a052f8f4679c7163cd005894e2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
031570a052f8f4679c7163cd005894e2_JaffaCakes118
-
Size
99KB
-
MD5
031570a052f8f4679c7163cd005894e2
-
SHA1
d34e00ccf71211a25e367b60ff3436b90468a98c
-
SHA256
dc139593dbe4a62c658e769c7d29354e9fc733f00df65d5d0ba8d51074c029d8
-
SHA512
0c169574594c3f738255aa6e05a938c3e4926179e20e4274da956720dd92f770b2c7f383e56860b15eb16426b181008759a191b6e8d6de01b4017d12f388cd76
-
SSDEEP
768:CfqoKC3RFDJCc7ZdItyRc2oB8BgxPma/+JGN22o6tsiyqTRPw:o/3bFJItl2oB8BgxPmaGJopo6ts
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 031570a052f8f4679c7163cd005894e2_JaffaCakes118
Files
-
031570a052f8f4679c7163cd005894e2_JaffaCakes118.exe windows:5 windows x86 arch:x86
24893579e387486479bf3898adc9ade1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
GetStdHandle
GetFileType
GetLocalTime
HeapFree
CopyFileA
GetLastError
CopyFileExA
DeleteFileW
GetCommandLineA
GetFileTime
lstrcatA
HeapAlloc
FreeResource
lstrcmpA
ExitProcess
WriteFile
DeleteFileA
ExitThread
OpenFileMappingA
ReadFile
CreateDirectoryA
user32
BeginPaint
DrawIconEx
CloseWindow
LoadCursorA
IsMenu
GetWindowTextA
LoadMenuA
advapi32
RegEnumKeyA
RegOpenKeyW
Sections
.9ag1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.0e8g Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.500e6 Size: 57KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.839h Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.e491 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ