Static task
static1
Behavioral task
behavioral1
Sample
ff222f9884803bf62bb2db8cf8154228_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff222f9884803bf62bb2db8cf8154228_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff222f9884803bf62bb2db8cf8154228_JaffaCakes118
-
Size
13KB
-
MD5
ff222f9884803bf62bb2db8cf8154228
-
SHA1
dc648cc0d14909e1a0ce0dedb8d4a6578dcaa384
-
SHA256
f12976db18e312a77a4bcd61ba3e927dcd20f8da046c5a2b2c041aa4d566cfa6
-
SHA512
0b0f0fdcc263f2cbbbba1e215ffea760765f53eb5294d5135e1f2023e72e3820afcd2df4912c77b26c9176a88906e748b198185af9e0148dbdf178ffa0e73bce
-
SSDEEP
384:9zsXdNcFw8RPNQ3mVQLIBqxSPS4mgv/4iV+tk:qdl+Q3mVsSPS4mxG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff222f9884803bf62bb2db8cf8154228_JaffaCakes118
Files
-
ff222f9884803bf62bb2db8cf8154228_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE