Static task
static1
Behavioral task
behavioral1
Sample
137c0f5fed52fd76ba32aba0100e94c3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
137c0f5fed52fd76ba32aba0100e94c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
137c0f5fed52fd76ba32aba0100e94c3_JaffaCakes118
-
Size
9KB
-
MD5
137c0f5fed52fd76ba32aba0100e94c3
-
SHA1
887dc5f5afb48bea5a7b64a4d3b74ec1a2277300
-
SHA256
c49a09d7a982bf860fd0c46d1536f08910d560c6a69dcf3ebc7170ed36182840
-
SHA512
2164029f19a9f1bc6373715a33f45898c4898c04f536c70d9dbf340e81c6b4d3eeef89c70d4d57d20efda9e759be4e2a8e3055d0735865478836a77d72e79210
-
SSDEEP
192:f0H0G6wUBuG9QyV7SM4o4feeEEZpaHCV7t6ZDCtEMMEq/2qt:fqxjUUG9f7TweUpGC9t6ZDCtEMMEq/2I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 137c0f5fed52fd76ba32aba0100e94c3_JaffaCakes118
Files
-
137c0f5fed52fd76ba32aba0100e94c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
96b2e968c8d942b1c476ffc19880a760
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strlen
_strlwr
strcpy
strcat
strcmp
kernel32
HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap
user32
LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA
shlwapi
StrToIntA
Sections
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ