Static task
static1
Behavioral task
behavioral1
Sample
5667772559cdae7776249b0d541f0720_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5667772559cdae7776249b0d541f0720_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5667772559cdae7776249b0d541f0720_JaffaCakes118
-
Size
48KB
-
MD5
5667772559cdae7776249b0d541f0720
-
SHA1
267e6e8ea915382357e7c6465279b233dadcb244
-
SHA256
c99d7317703d3902f04f984f6c902272acf4263f73f9c24d4bcc04af73bd1744
-
SHA512
7fa56f52092e1d6a6ed0e97bc1ae380cd42b8e57e6ade8ec71c39867f9dd0dbfa4660924caf40a88e441a69c3f324962f34679d1fa0db7234a9a2265b8c3468b
-
SSDEEP
96:7a25AYXmlyzR1gJr9OrkdiRdmi/9JGjbHpYp2A4nc4n54MHPtboynG7i:vOYWYkdiZlcbW2d2UP1oynG7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5667772559cdae7776249b0d541f0720_JaffaCakes118
Files
-
5667772559cdae7776249b0d541f0720_JaffaCakes118.exe windows:4 windows x86 arch:x86
24c9432e565f6e8d635b364bced380a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
user32
CharUpperA
msvcrt
__p__fmode
_except_handler3
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strstr
strchr
strrchr
strlen
toupper
fprintf
strcat
strcpy
memset
fopen
fclose
strcmp
__set_app_type
kernel32
GetStartupInfoA
SetCurrentDirectoryA
CreateProcessA
CreateFileA
GetFileTime
SetFileTime
GetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
GetWindowsDirectoryA
SetFileAttributesA
CopyFileA
GetModuleFileNameA
DeleteFileA
SetSystemTime
Sleep
GetModuleHandleA
GetSystemTime
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE