Static task
static1
Behavioral task
behavioral1
Sample
14a2dd118e6a5ee38d4e62ce9421df74_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
14a2dd118e6a5ee38d4e62ce9421df74_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14a2dd118e6a5ee38d4e62ce9421df74_JaffaCakes118
-
Size
6KB
-
MD5
14a2dd118e6a5ee38d4e62ce9421df74
-
SHA1
1d3337fc6ba2bb5fdc8f5774f7a2045e74c060ef
-
SHA256
cda441041eadab66c9739f57989ba064a221664fe6a2553edf2d998cdf9dcf45
-
SHA512
239c39f1a7001805442933c37e78a671b7369e78528e3bf9d8a22e2dccd95b0cf597e4110124f054da883d8c09d63eae078e00ab4d00a02dbaa122f7a6d33f0d
-
SSDEEP
96:Ym9JAE3l0YkkErHnL8kEzMhQjrIyFkIyFGz4VQEQ+5:YmLAm06ErnL8lwMHzKRQ+5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a2dd118e6a5ee38d4e62ce9421df74_JaffaCakes118
Files
-
14a2dd118e6a5ee38d4e62ce9421df74_JaffaCakes118.exe windows:1 windows x86 arch:x86
eea397c93ba19e2206435a01c8a49a7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
FreeLibrary
GetCommandLineA
GetExitCodeThread
GetFileAttributesA
GetLocaleInfoA
GetModuleHandleA
GetProcAddress
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemDirectoryA
CloseHandle
GetTempPathA
LoadLibraryA
CopyFileA
LocalAlloc
LocalFree
RtlUnwind
RtlZeroMemory
CreateFileA
SetFilePointer
VerLanguageNameA
WaitForSingleObject
WriteFile
CreateProcessA
CreateThread
user32
LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
RegisterClassA
CreateWindowExA
DefWindowProcA
crtdll
__GetMainArgs
_sleep
_stricmp
exit
raise
signal
strchr
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 388B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE