Static task
static1
Behavioral task
behavioral1
Sample
c2531127a3a652699f9b3d4b4215f019_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
c2531127a3a652699f9b3d4b4215f019_JaffaCakes118
-
Size
103KB
-
MD5
c2531127a3a652699f9b3d4b4215f019
-
SHA1
2c67f58515dc3b2d4fed610e55ee78d26ada84be
-
SHA256
9fb590a2bd7a2c93aa9be7fd617c5c67cdd66eebcaebc44677d04b98028929c6
-
SHA512
e4ef76917863f2e94441bc00a4d48b049566e7b4afa78e45226f05b0d472c388add90366eb7c60ef75676696da21e5f95bd8ad698a835ec7b568fdc2326bd373
-
SSDEEP
1536:0OghaZcYZqJC3xdTNYs9dhoh8SHsNqJH2xEXXxg7/sU1pf6urX:0PaZ0JKSs3hPSMNr8+DV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2531127a3a652699f9b3d4b4215f019_JaffaCakes118
Files
-
c2531127a3a652699f9b3d4b4215f019_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.uf3B Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.R67W Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pAeS Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE