Static task
static1
Behavioral task
behavioral1
Sample
b9b275c08efd0e570023ea72b87d11ca_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9b275c08efd0e570023ea72b87d11ca_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
b9b275c08efd0e570023ea72b87d11ca_JaffaCakes118
-
Size
244KB
-
MD5
b9b275c08efd0e570023ea72b87d11ca
-
SHA1
973e50e7a08a9a043c954d01b36e81d4b9e8971b
-
SHA256
a99d97ddfd8fe18d735e8f849a532558f3b6f71b105770d391957c160708bcbc
-
SHA512
660f8ad67dec852a057ab59c1dc5db45645637843800365f4566d6bce579e2491720f2e13832fa589f34ab65a24b77ffa82aa837606891419626ace32e32fbe8
-
SSDEEP
6144:ZqobsBIUj9y0NPe9DMm0biMLEJOY0+sSNmHP:ZlYBIUj9yZ9DMfiva+sx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9b275c08efd0e570023ea72b87d11ca_JaffaCakes118
Files
-
b9b275c08efd0e570023ea72b87d11ca_JaffaCakes118.exe windows:5 windows x86 arch:x86
18c89e2ec0a399c68eaedd6551ce71fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE