Static task
static1
Behavioral task
behavioral1
Sample
0f35ed09c121551899eadce15a5a66c1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f35ed09c121551899eadce15a5a66c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f35ed09c121551899eadce15a5a66c1_JaffaCakes118
-
Size
28KB
-
MD5
0f35ed09c121551899eadce15a5a66c1
-
SHA1
cca0c42e044fd4e08b1969c55fc344559d0d0915
-
SHA256
288c5a609216470eeb2fceefbb585b97bd81649a9141df47b918b60e99b02029
-
SHA512
dbf73bacb7b24f9d6f825812fedb166826a535b4ce7755c0b15e78fc83b6aa5bef7434d558b8b8bfd8c8c047ba07792cf77d39b6813d2017070a0b30fce01229
-
SSDEEP
384:RJFjR/E8DbCH1Ldp7oig3Y1hMSFHcK5WW8yKSPXubTDzhmqkG/OI:PdRVbMptNggpWWHPXETA9U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f35ed09c121551899eadce15a5a66c1_JaffaCakes118
Files
-
0f35ed09c121551899eadce15a5a66c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
491668c1e4d5e5b473661af0ca978184
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetLastError
CloseHandle
CreateMutexA
SetLastError
GetCurrentThread
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetStartupInfoA
msvcrt
free
calloc
strncpy
strchr
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
atoi
rand
time
srand
malloc
memset
strlen
_snprintf
_XcptFilter
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 858B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ