Static task
static1
Behavioral task
behavioral1
Sample
141f4972a05b3d3d169f88d6e0196fdf_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
141f4972a05b3d3d169f88d6e0196fdf_JaffaCakes118
-
Size
249KB
-
MD5
141f4972a05b3d3d169f88d6e0196fdf
-
SHA1
c3c5e6b48457b94b69ef43d7c84105ca0d434485
-
SHA256
83b6a822803aa8656b06364ca5377f619572c2e423125559451b31fcd4082da0
-
SHA512
fa74fa65a24b71d82a213179230d28671f04633088ef66627f6a5532fdf285cd6e485dc567507727c2454d97ce042f22c51868fa128f01327298d23c1fda7d0e
-
SSDEEP
6144:uPIHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg25:GIgPOvb27SJm45OOizCW5N5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 141f4972a05b3d3d169f88d6e0196fdf_JaffaCakes118
Files
-
141f4972a05b3d3d169f88d6e0196fdf_JaffaCakes118.exe windows:4 windows x86 arch:x86
e387e9522201bdbcd32f1116a3c5a6bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetEnvironmentVariableA
FindClose
InitializeCriticalSection
GetSystemInfo
SuspendThread
GetFileSize
CreateMutexW
FindClose
SetEndOfFile
CloseHandle
ResetEvent
CreateFileA
WaitForSingleObject
GetCurrentDirectoryA
GetTickCount
ExitProcess
HeapCreate
GetModuleHandleA
HeapSize
GetStartupInfoW
DeleteFileA
AddAtomW
ReleaseMutex
HeapDestroy
wininet
FtpOpenFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
HttpQueryInfoA
HttpEndRequestA
DeleteUrlCacheEntryA
FtpPutFileA
FtpGetCurrentDirectoryA
FindCloseUrlCache
FtpGetFileA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ