Static task
static1
Behavioral task
behavioral1
Sample
17a83eff20d0b6f6b1659a6a754a5357_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17a83eff20d0b6f6b1659a6a754a5357_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17a83eff20d0b6f6b1659a6a754a5357_JaffaCakes118
-
Size
207KB
-
MD5
17a83eff20d0b6f6b1659a6a754a5357
-
SHA1
7d8eb2ff2b60a0657609de582d4381879c13e7ea
-
SHA256
79eea972fcc7f9c213f79a78f8f84ea8b567d483024ebb0e36603d27105b69fc
-
SHA512
5c7d10b5616a027fcb3eda6753c5e72ac1fe5c9e40cd51ceb9bac064db5e651533f51be377c62214002e9180e8b8de4ec4dbbba55488db49df8ae05ba1d5cf2c
-
SSDEEP
6144:hyLhODiJ4hfV4uRxnwei8ej0EJfhs+5kKFVBfKKns0:hyOx4uR9JejNt+4VB1v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17a83eff20d0b6f6b1659a6a754a5357_JaffaCakes118
Files
-
17a83eff20d0b6f6b1659a6a754a5357_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a5b765c82ed74bbc69f097d1902342a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
ExitProcess
DeleteFileA
ResetEvent
IsBadCodePtr
FindVolumeClose
FindAtomA
HeapDestroy
WaitForSingleObject
GetFileSize
FindVolumeClose
VirtualAlloc
SetEndOfFile
GetCurrentDirectoryA
HeapSize
GetModuleHandleA
ResumeThread
GetTickCount
CreateFileA
EnterCriticalSection
CloseHandle
GetCommandLineA
GetStartupInfoW
SetFileAttributesA
ReleaseMutex
wininet
FtpGetFileW
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpCreateDirectoryW
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
FtpFindFirstFileA
FtpPutFileA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpOpenFileA
FtpDeleteFileA
HttpEndRequestA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ