Static task
static1
Behavioral task
behavioral1
Sample
3f5e63df125f7eca4c1e23b7986ec7e8_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
3f5e63df125f7eca4c1e23b7986ec7e8_JaffaCakes118
-
Size
5KB
-
MD5
3f5e63df125f7eca4c1e23b7986ec7e8
-
SHA1
67b85214b10b28fed7d60ad668811302b3d54d18
-
SHA256
66fba2d4a2f8c2cce20ccd1bfc441231a0f17f60511e5c7c2876e483ab566b8c
-
SHA512
3131462b25f7055bdec1161d1da9024dedbace8b383dc45f3364a6301fb994520f2bfe5a294e1af60b04acf9a8aa12d5b8580f4dbd7dd7addec1e0da9459b862
-
SSDEEP
96:NcMmQw5kJm3umF7ErUn3Vum2OhjcCdXx56yYu:N7IvumF7EGFuhYcCop
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f5e63df125f7eca4c1e23b7986ec7e8_JaffaCakes118
Files
-
3f5e63df125f7eca4c1e23b7986ec7e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc13980c0527867d0f368838d760c82e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
GetPrivateProfileStringA
GetProcAddress
GlobalFree
LoadLibraryA
RtlMoveMemory
RtlZeroMemory
lstrlenA
ExitProcess
FindFirstFileA
CloseHandle
CreateFileA
GetFileSize
GlobalAlloc
ReadFile
FlushFileBuffers
WriteFile
FindClose
DeleteFileA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
wininet
FtpPutFileA
InternetConnectA
InternetOpenA
FtpCreateDirectoryA
InternetCloseHandle
FtpSetCurrentDirectoryA
advapi32
GetUserNameA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE