Static task
static1
Behavioral task
behavioral1
Sample
0c64c593866b064861dc87d3835038a2_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c64c593866b064861dc87d3835038a2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c64c593866b064861dc87d3835038a2_JaffaCakes118
-
Size
37KB
-
MD5
0c64c593866b064861dc87d3835038a2
-
SHA1
0cd3a49470e1a4d9119d2be2e72d9e43de437649
-
SHA256
ad5fd57ef9dae5c7683ddafed6b5ad921f406ec1477e2e25a4c68b79e4a4e098
-
SHA512
d4f2ddf61de8f63e576c482dda7f85cfe8e0718a5dee259468a18a61a846aa8ad866893ecdef5365ddf33d2c35ee4fe5f557a1729346574b1207dab3e3816d3f
-
SSDEEP
768:n0tOGWK1oNCQlmBuraXrN3g1xjni+9TVoGMnb3KJOO5F4CAK+aob:nTaeNcurohwrri+xV3Mb6F4n8s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c64c593866b064861dc87d3835038a2_JaffaCakes118
Files
-
0c64c593866b064861dc87d3835038a2_JaffaCakes118.exe windows:5 windows x86 arch:x86
fdb1d71c1a9e48c9ecb09efbe6cc9ae0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
ExitProcess
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetProcAddress
LoadLibraryA
user32
PostQuitMessage
GetKeyNameTextA
LoadIconA
DefWindowProcA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ