Static task
static1
Behavioral task
behavioral1
Sample
f0b11d6eba2272071359d468ead56758_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0b11d6eba2272071359d468ead56758_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0b11d6eba2272071359d468ead56758_JaffaCakes118
-
Size
179KB
-
MD5
f0b11d6eba2272071359d468ead56758
-
SHA1
f2dac78178b7884b2bf068c3a8dae8ac656c53a3
-
SHA256
b3a547cb65b06eab2703051c19effde84f202ee588b470891f87e02cd55e5465
-
SHA512
2da575f953d6ed0d8e6bd6a70032ff391ebb851c6b5fecbd7313939796d1a854148ce5fdf0e8e8950ded796a5e83ac092ef30cf0b1db0784a00b38c048bc43b7
-
SSDEEP
3072:IFmxsczyRrAO75U+31DjsAZ8yTyZMCAeABPhyPoJz//hMhfWCMHYHZpsoOFL7jcG:IQ2RrAO7zBjsAjTyZMCAeABPuyznkbMZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0b11d6eba2272071359d468ead56758_JaffaCakes118
Files
-
f0b11d6eba2272071359d468ead56758_JaffaCakes118.exe windows:5 windows x86 arch:x86
f020e1a2feae651f7ce88318f285b500
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
shell32
ShellExecuteW
ws2_32
WSAStartup
Sections
UJHFFTRT Size: - Virtual size: 580KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UJHFFTRT Size: 178KB - Virtual size: 180KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE