Static task
static1
Behavioral task
behavioral1
Sample
7d055ccb42eb596df67022c40bd9f9c8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7d055ccb42eb596df67022c40bd9f9c8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
7d055ccb42eb596df67022c40bd9f9c8_JaffaCakes118
-
Size
168KB
-
MD5
7d055ccb42eb596df67022c40bd9f9c8
-
SHA1
4594ff62de294665eaf1d40ed5c01900151e30ef
-
SHA256
d7e1c7cd4ab384a7ee62e691d3551bfba693ab3e0d7876d8d976d04e67050478
-
SHA512
af2ac640b5decee17c374a00836f4daa932e1b0922f2e048a0a2c48fdb21297c538fea91ee68e34322055b96ec30aa1571bb08c7c4dff23a1bfc3ea1b30a8bac
-
SSDEEP
3072:J0U8dYKCjUTZ4A2+2YBVjYOZyG7+x7hcLxKl:a2jOZt2+2YnjYbquhcLxKl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d055ccb42eb596df67022c40bd9f9c8_JaffaCakes118
Files
-
7d055ccb42eb596df67022c40bd9f9c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
6d1801d3a86dabcc11dd2a73f091e307
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
lstrcpyA
MultiByteToWideChar
lstrlenA
CloseHandle
GetFileTime
GetFileAttributesA
HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
ExitProcess
WideCharToMultiByte
GetTickCount
SetEnvironmentVariableA
GetTempPathA
LocalFileTimeToFileTime
SystemTimeToFileTime
lstrcmpiA
Sleep
ExpandEnvironmentStringsA
GetModuleFileNameA
GetCommandLineA
GetStartupInfoA
user32
wsprintfA
shlwapi
SHDeleteKeyA
msvcrt
_itoa
strcpy
tolower
strlen
??3@YAXPAX@Z
wcscpy
_controlfp
_except_handler3
strcat
strncat
strchr
memset
rand
srand
_ftol
memcpy
__CxxFrameHandler
_CxxThrowException
strstr
??2@YAPAXI@Z
_strnicmp
_memicmp
_strlwr
_stricmp
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ