Static task
static1
Behavioral task
behavioral1
Sample
04bdb08dbaa38e4d97fe835f598ad85b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
04bdb08dbaa38e4d97fe835f598ad85b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04bdb08dbaa38e4d97fe835f598ad85b_JaffaCakes118
-
Size
51KB
-
MD5
04bdb08dbaa38e4d97fe835f598ad85b
-
SHA1
4630119b8b8ddf58721ec51d6c9908be0444d39e
-
SHA256
6719e8cb44baeb235d21ab43e1a9278acceadd9dcfd3b6691152025133fb128c
-
SHA512
4ffe58c7570c66fa9008b6c2d3ce65b914789389b354bfbf7f310d4e125a47a257062768bccabfcaefcab94812c763d2d43c2b4a98380c27a28ea090e04f555b
-
SSDEEP
192:iNTSadORMP3huuaFZLa5bk1YiLFOGb4mLiTsBlYIGoBNhtNh9D5zGvFHy2:iNGAh5bkpOQ4mxlYUB7t79D5zW82
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04bdb08dbaa38e4d97fe835f598ad85b_JaffaCakes118
Files
-
04bdb08dbaa38e4d97fe835f598ad85b_JaffaCakes118.exe windows:4 windows x86 arch:x86
b80ab1f6db6508975af679b2ebc50aff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetLastError
SetFileAttributesA
GetSystemDirectoryA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
DeleteFileA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress
LoadLibraryA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 998B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 36KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE