Static task
static1
Behavioral task
behavioral1
Sample
09944de819cdb13b00522911c651e787_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
09944de819cdb13b00522911c651e787_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
09944de819cdb13b00522911c651e787_JaffaCakes118
-
Size
1.0MB
-
MD5
09944de819cdb13b00522911c651e787
-
SHA1
f1c504b34c0849dc8f3b0d41b310c7d3659eb605
-
SHA256
67d1d00b5869ee18a7fea273e30f8ac0673b66f5f437c1a118a20bbe76d42ae2
-
SHA512
661b80ead5f52e1f3fa2298b9319b4c62cf3e63b4d46627af37ba8e2531d83283c0808220c289460669fda759e7d8eda5577f71feb70b1d0c6c8f9d4a7c15bc1
-
SSDEEP
24576:JR1ULywom81qLZGUKa1J0kFhSybAEdewY5Lt:JRprd12fNNbWwYpt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09944de819cdb13b00522911c651e787_JaffaCakes118
Files
-
09944de819cdb13b00522911c651e787_JaffaCakes118.exe windows:4 windows x86 arch:x86
02792e2caf839b3e8a933975b6514eeb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
winmm
waveOutReset
waveOutClose
waveOutOpen
mmioDescend
mmioClose
mmioRead
mmioAscend
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_reloc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ