Static task
static1
Behavioral task
behavioral1
Sample
407f0354ebf29aafc2fc03d2ac501317_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
407f0354ebf29aafc2fc03d2ac501317_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
407f0354ebf29aafc2fc03d2ac501317_JaffaCakes118
-
Size
305KB
-
MD5
407f0354ebf29aafc2fc03d2ac501317
-
SHA1
49c1a1be4fb94ccc0401636d57f4aad8656d6211
-
SHA256
aa79cc1852a9f84124f21b2fb7a8bc0d70b4c8af16ac030f2e27039ebdd44250
-
SHA512
957cde392dbbfd1217f3a28d04395b133dff1cd70f446e0a53b480a1314d1ca1e843dbb941f241bab2d12611bf9b9cbf1517ae66015e810233afc6c90081df71
-
SSDEEP
6144:VxAIIEZNvxuPLucFwPQDyVbhgEU+p+Mms5EOJfduWbOP4vlxeR:VJZ0D4TbhgE/pzb5EO37zto
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 407f0354ebf29aafc2fc03d2ac501317_JaffaCakes118
Files
-
407f0354ebf29aafc2fc03d2ac501317_JaffaCakes118.exe windows:4 windows x86 arch:x86
dec9e6a8406f0b7f6bfc0dd24a85df3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
ReleaseMutex
GetModuleHandleA
HeapDestroy
WaitForSingleObject
CreateFileA
ResetEvent
GetCurrentDirectoryA
GetEnvironmentVariableA
GetTickCount
InitializeCriticalSection
ExitProcess
GetTickCount
FindClose
DeleteFileA
CreateMutexW
HeapCreate
SetEndOfFile
GetSystemInfo
AddAtomA
GetStartupInfoW
GetFileSize
CloseHandle
FindClose
SuspendThread
wininet
FtpDeleteFileA
HttpEndRequestA
HttpQueryInfoA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpGetFileA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpOpenFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
FtpPutFileA
encapi
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 299KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ