Static task
static1
Behavioral task
behavioral1
Sample
0e3d268c99d6d8db40ba08c4e6bde0fa_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
0e3d268c99d6d8db40ba08c4e6bde0fa_JaffaCakes118
-
Size
78KB
-
MD5
0e3d268c99d6d8db40ba08c4e6bde0fa
-
SHA1
6a5d2e2b403ff672e75fa4fd80507a99ee17a940
-
SHA256
1ab72e987b4edc1bb0662bede09f498d8891bc9b2dd4107b229bf7abfc2ab92c
-
SHA512
424ed735ed3d7cf3555e1501841e7f4a80292e686b32f3d6da086cf3c0d3ef0e0b517a40efb12fc9f62a21d814243fc1ec33fc2b0798aec260e61038e3aa812b
-
SSDEEP
1536:YRBreX9EF+BFT2H5aqtD8W/HJ7Mk9jvxYCwaqiPsg/2z+hTarb7I/TW2:YRg2F+BF6H5dDx4AiCwaqiZhT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e3d268c99d6d8db40ba08c4e6bde0fa_JaffaCakes118
Files
-
0e3d268c99d6d8db40ba08c4e6bde0fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE