Static task
static1
Behavioral task
behavioral1
Sample
21cf997fb7ea0ec5a2a5e4e448b208de_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21cf997fb7ea0ec5a2a5e4e448b208de_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
21cf997fb7ea0ec5a2a5e4e448b208de_JaffaCakes118
-
Size
179KB
-
MD5
21cf997fb7ea0ec5a2a5e4e448b208de
-
SHA1
0a4bc24054d9ef8f7d6643b68856f2a4e4a3af22
-
SHA256
695cb0808cc4bed5a25a191464b1cf18ebdf3dcad0fb9de95593aa884a43ffe1
-
SHA512
f874b29cd7a0991db98665aa1d4b23f0125a8a8d866ee9732da3a57483794e2020e60d26eafffede27afeed427e0b1412bbf09d7bdf85421e6024b95077b232b
-
SSDEEP
3072:IFmxsczyRrAO75U+31DjsAZ8yTyZMCAeABPhyPoJz//hMhfWCMHYHZpsoOFL7jc/:IQ2RrAO7zBjsAjTyZMCAeABPuyznkbMg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21cf997fb7ea0ec5a2a5e4e448b208de_JaffaCakes118
Files
-
21cf997fb7ea0ec5a2a5e4e448b208de_JaffaCakes118.exe windows:5 windows x86 arch:x86
f020e1a2feae651f7ce88318f285b500
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
shell32
ShellExecuteW
ws2_32
WSAStartup
Sections
UJHFFTRT Size: - Virtual size: 580KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UJHFFTRT Size: 178KB - Virtual size: 180KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE