Static task
static1
Behavioral task
behavioral1
Sample
14b7e5eb9c119e142372cac754945bd1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
14b7e5eb9c119e142372cac754945bd1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14b7e5eb9c119e142372cac754945bd1_JaffaCakes118
-
Size
818KB
-
MD5
14b7e5eb9c119e142372cac754945bd1
-
SHA1
9bc41ebc01cb75f394f52236c82ed2c3ce844291
-
SHA256
4f7f04f036dc58bd8855fa904d742bd850579b88904300f39353303a879ca494
-
SHA512
ff012930f437739e423531dc5ccc4e5ae5bc84778d22fed6ffa5e2865529c7f662127aa09f76f93788d4f99c0ebf05d0ea785c3f68ecc88dd502f6eb19749a48
-
SSDEEP
12288:ukE/MtmcR+UzmnYCEM5V4rm87NXVv3y3hPunMcFifq1LkgH9nh1onvJQin:6D8+lnz4rdZ3y3hekYIG7onvJQg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14b7e5eb9c119e142372cac754945bd1_JaffaCakes118
Files
-
14b7e5eb9c119e142372cac754945bd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
e29b83aac0cb97c9210f0c7493323d21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
ReadConsoleA
VirtualFree
GetModuleHandleA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcatA
VirtualProtectEx
Heap32First
GetCurrentDirectoryA
lstrcpynA
GetCurrentThreadId
GetDiskFreeSpaceW
lstrcpynA
GetVolumeInformationA
WriteFile
lstrcpynA
OpenMutexW
GetFileType
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
GetDriveTypeA
SetThreadPriority
lstrcpynA
FindFirstVolumeA
lstrcmpW
GetSystemTime
cmdial32
RasCustomDial
AutoDialFunc
RasCustomDialDlg
InetDialHandler
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ