Static task
static1
Behavioral task
behavioral1
Sample
1393bf2803397ac121fd259af537c1a7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1393bf2803397ac121fd259af537c1a7_JaffaCakes118
-
Size
5KB
-
MD5
1393bf2803397ac121fd259af537c1a7
-
SHA1
c07ffa5952eedfdae428e5282d02b13754e1c9b9
-
SHA256
66d488ca251fde8cf9f61d531c23c90d301120d1a2904ecbe0d82e335aa579a0
-
SHA512
eda7c6a17b0c8f65a9580542365a92120cbbec1b909e5e3b06f184ca783054da4b08b0cb53bfec39ad7d85644681f225b86f8062bd583ac51ce74eaa9cf4684c
-
SSDEEP
96:dqcMmQw5kJm3umF7ErUn3Vum2OhjcCdXx56yYu:dq7IvumF7EGFuhYcCop
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1393bf2803397ac121fd259af537c1a7_JaffaCakes118
Files
-
1393bf2803397ac121fd259af537c1a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc13980c0527867d0f368838d760c82e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
GetPrivateProfileStringA
GetProcAddress
GlobalFree
LoadLibraryA
RtlMoveMemory
RtlZeroMemory
lstrlenA
ExitProcess
FindFirstFileA
CloseHandle
CreateFileA
GetFileSize
GlobalAlloc
ReadFile
FlushFileBuffers
WriteFile
FindClose
DeleteFileA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
wininet
FtpPutFileA
InternetConnectA
InternetOpenA
FtpCreateDirectoryA
InternetCloseHandle
FtpSetCurrentDirectoryA
advapi32
GetUserNameA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE