Static task
static1
Behavioral task
behavioral1
Sample
0c86be559a63739b649cb7d871fe321e_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
0c86be559a63739b649cb7d871fe321e_JaffaCakes118
-
Size
5KB
-
MD5
0c86be559a63739b649cb7d871fe321e
-
SHA1
40a5af55c9dd926a312864d3cf28a3c687a51363
-
SHA256
7a850b0334b1e6d2511ffb6b067a32a264956da064de144544430e16ff2a3ed2
-
SHA512
5a67d76155b7981bdba3ab5c54ff69ff9d16fb5a6d69a41852f8af93233fcc28f4d12ba582407fc499de6f0385fca67f5fb6d376c313ea08d4853a5aacd6b6df
-
SSDEEP
96:IcMmQw5kJm3umF7ErUn3Vum2OhjcCdXx56yYu:I7IvumF7EGFuhYcCop
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c86be559a63739b649cb7d871fe321e_JaffaCakes118
Files
-
0c86be559a63739b649cb7d871fe321e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc13980c0527867d0f368838d760c82e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
GetPrivateProfileStringA
GetProcAddress
GlobalFree
LoadLibraryA
RtlMoveMemory
RtlZeroMemory
lstrlenA
ExitProcess
FindFirstFileA
CloseHandle
CreateFileA
GetFileSize
GlobalAlloc
ReadFile
FlushFileBuffers
WriteFile
FindClose
DeleteFileA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
wininet
FtpPutFileA
InternetConnectA
InternetOpenA
FtpCreateDirectoryA
InternetCloseHandle
FtpSetCurrentDirectoryA
advapi32
GetUserNameA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE