Static task
static1
Behavioral task
behavioral1
Sample
cd73eebd5745ffadd9db2c4590d15e06_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
cd73eebd5745ffadd9db2c4590d15e06_JaffaCakes118
-
Size
376KB
-
MD5
cd73eebd5745ffadd9db2c4590d15e06
-
SHA1
e95f94633cb7262e44ede4c3cffaef8a21023c57
-
SHA256
f4ab3d58f8a3b82bdfc5b6247a050b06986bcec1581687e0e7446411030c4b4a
-
SHA512
716ffdc25672c271bef1ba507baa2e1f8467edccd899ea45809122bc5b4f70aa71d63ff9643b637dfed45c69565be7af12cd7d14d8030380aa45c5a0eeed6975
-
SSDEEP
6144:PqoG+dG/BkLN6OKhCjeRu5AxIocEbwRfM+ZyMTVf9CNJ8KPAvQePihp00o:PhG+wJkB6bRuSIocywnpz6Xu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd73eebd5745ffadd9db2c4590d15e06_JaffaCakes118
Files
-
cd73eebd5745ffadd9db2c4590d15e06_JaffaCakes118.exe windows:4 windows x86 arch:x86
744db3ce8dcb8240f752e575916d499f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetLocalTime
GetWindowsDirectoryA
GetModuleHandleA
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
RtlUnwind
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.drdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE