Static task
static1
Behavioral task
behavioral1
Sample
09c8b568a82629cf89fdc760d17ff962_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
09c8b568a82629cf89fdc760d17ff962_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09c8b568a82629cf89fdc760d17ff962_JaffaCakes118
-
Size
1.3MB
-
MD5
09c8b568a82629cf89fdc760d17ff962
-
SHA1
465828681997da3161668310465aa460aad5b8cd
-
SHA256
796bcde2125295d9758ad2ae473189e9e4550a01aca87b161e0bc2ad8e8e1373
-
SHA512
e716a4772f73e47da20539b64f679ad54c612dc825426b7adb30415f997e8b99e9caf6ad1e38c6b0d4caa997a2ccb622c252c9f091316a78e9f40cecf3589e5a
-
SSDEEP
24576:IrY9uiXCZEmH+AoNRx0Dz3QEZ3Ipm8BvQ+F+NWDpYtxrRLdPtNO:IiXC6mHRHQuO1InWDGtxrRJtk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09c8b568a82629cf89fdc760d17ff962_JaffaCakes118
Files
-
09c8b568a82629cf89fdc760d17ff962_JaffaCakes118.exe windows:4 windows x86 arch:x86
35a9e9974c673669c35cafffdf20e1bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
Sections
Size: 667KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
silwmkvq Size: 624KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
flljwpue Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE