Static task
static1
Behavioral task
behavioral1
Sample
e9487f570c8299ee1daec59b73fd7ea7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9487f570c8299ee1daec59b73fd7ea7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9487f570c8299ee1daec59b73fd7ea7_JaffaCakes118
-
Size
74KB
-
MD5
e9487f570c8299ee1daec59b73fd7ea7
-
SHA1
e76d5d4ec4a83a4724bde3b2f69de332a5f3ed8c
-
SHA256
08f0dbaa34691d4350532f800c587c540efe7b7c2eeda299836bd87bf1a7bcb3
-
SHA512
85983fb862230ee9c8cbbf0c3764f37bdcb2c1fd0326d12a404df016ddeee53fad27fb20fcbe35706fda618497d91d56aca20b62857653fcd72291a1885e2822
-
SSDEEP
1536:RkHzrSJ1ik287DPiq1KQ4l1T2GkoKTwHDP3Xn/odsgo:iTyikbXPiqwr1aGkoKT2D/voe3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9487f570c8299ee1daec59b73fd7ea7_JaffaCakes118
Files
-
e9487f570c8299ee1daec59b73fd7ea7_JaffaCakes118.exe windows:4 windows x86 arch:x86
49a673314b21aa7888cd1075405f03ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE