Static task
static1
Behavioral task
behavioral1
Sample
37b395a41b12bd1b4d87b184b0de7bfd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37b395a41b12bd1b4d87b184b0de7bfd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37b395a41b12bd1b4d87b184b0de7bfd_JaffaCakes118
-
Size
91KB
-
MD5
37b395a41b12bd1b4d87b184b0de7bfd
-
SHA1
4501bf642002dd97c48d3eeaa0a9bebddeadd950
-
SHA256
733d986234dadd3a99edba22476fd78969a22464ad5103d90eaa2f87a69f9557
-
SHA512
0c41cf828be8b30f6677672ac1b60c7412a211974d52a5a15b0bcd2f07be9885ab2456d3e6e2913b64ac06c8d1e4b32342d5a1ed684a8cdd34139b441f06a5a7
-
SSDEEP
1536:7kd89uEZU613I2QmGfHGTDOMKAHntpRr7cTPh2aE36A1TdnNsJ49U:gsuSP43vG+5AzR/mPhe36obU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37b395a41b12bd1b4d87b184b0de7bfd_JaffaCakes118
Files
-
37b395a41b12bd1b4d87b184b0de7bfd_JaffaCakes118.exe windows:4 windows x86 arch:x86
d50f8e31c6e6409850a148fbd7f4643a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
printf
free
_snwprintf
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
rand
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
sprintf
malloc
_snprintf
memcpy
strlen
atoi
atol
wcscpy
strstr
strcmp
strcat
fopen
fclose
_initterm
strcpy
kernel32
SetErrorMode
DeleteFileW
GetModuleFileNameW
GetCommandLineW
GetTickCount
MultiByteToWideChar
CreateFileW
WriteFile
CloseHandle
GetLastError
SetLastError
Sleep
GetModuleHandleA
GetProcAddress
GetStartupInfoA
ws2_32
send
closesocket
socket
user32
MessageBoxA
FindWindowA
IsZoomed
GetClassNameA
shell32
SHGetSpecialFolderPathW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ