Static task
static1
Behavioral task
behavioral1
Sample
1401fd707752282a80515a90f509e87f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1401fd707752282a80515a90f509e87f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1401fd707752282a80515a90f509e87f_JaffaCakes118
-
Size
75KB
-
MD5
1401fd707752282a80515a90f509e87f
-
SHA1
8918b67d5b66957c23782a954b53347b7901cf1c
-
SHA256
ce35ef7dfd6deb25a54e2cddb2f03c0c6235e87994300a8eea70290bd33ca2fe
-
SHA512
a46bbc1aa478848a7318e9b7b9241121bd77e6be5f15034e28d3d4c4b66b3634111ad8ee8789c04600a52458e9e49da6b0166275a0d77ca620ec838966bb6b09
-
SSDEEP
1536:nCABP1KiGPNuqUs5ose66bsFsXgv8cArYDrIeTcxIDVhrmhS0XQ:nXPkpb5olNNgv8JrYD+KPy6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1401fd707752282a80515a90f509e87f_JaffaCakes118
Files
-
1401fd707752282a80515a90f509e87f_JaffaCakes118.exe windows:5 windows x86 arch:x86
2dff2f1644ee0f63b07e0bc45fc8e901
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
GetEnvironmentVariableA
GetThreadLocale
GetLocaleInfoA
EnumCalendarInfoA
InterlockedIncrement
WritePrivateProfileStringA
CreateProcessA
GetLocaleInfoW
SetFilePointer
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
GetWindowsDirectoryA
SetFileAttributesW
GetEnvironmentStrings
GetCurrentThread
GetTimeZoneInformation
GetEnvironmentStringsW
GetTickCount
GetLastError
VirtualProtect
SizeofResource
GetProcAddress
RtlMoveMemory
GetTempPathA
LoadResource
DeleteFileA
QueryPerformanceCounter
LocalFree
GetCommandLineW
msvcrt
__p__commode
__p__fmode
_exit
_except_handler3
_controlfp
_XcptFilter
_initterm
__getmainargs
_adjust_fdiv
__p___initenv
__set_app_type
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ