Static task
static1
Behavioral task
behavioral1
Sample
973a4afe610f308841c89d3ba54c3486_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
973a4afe610f308841c89d3ba54c3486_JaffaCakes118
-
Size
208KB
-
MD5
973a4afe610f308841c89d3ba54c3486
-
SHA1
3903878bb6c51c33681a693c128e5fe8872cdf3b
-
SHA256
b717b795c1b809d8613992490d030b729d590a48e4f5e1233431ef3bce1b0d56
-
SHA512
19a1f5dd3bb9c310b56239ed92551c57b0f201e99532cd77ca04d1d55022112eacfc1a84372f1781cc1f1beed212b5df9a2239cc2ec44a43a24b20c2db1f04ae
-
SSDEEP
6144:X17R4t23DRTWadm4BpX8ntjv6s4amwMURgF/:z+cDRCadVpX8nt7cCQ/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 973a4afe610f308841c89d3ba54c3486_JaffaCakes118
Files
-
973a4afe610f308841c89d3ba54c3486_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JJav Size: 104KB - Virtual size: 104KB