Static task
static1
Behavioral task
behavioral1
Sample
10077489a3b5958810895250dbe2f267_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
10077489a3b5958810895250dbe2f267_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
10077489a3b5958810895250dbe2f267_JaffaCakes118
-
Size
150KB
-
MD5
10077489a3b5958810895250dbe2f267
-
SHA1
d27333f14068fc6da33d08b3fce26811d14299aa
-
SHA256
61e04cbde20057e8214734ed002e349616fed66e339da69262e51cc2b6f18007
-
SHA512
1954cdfd667489256ab5780b0d7dc4a274761e9ac28c6309355408c6beadcbb55d0c7fe23e312069bb550ea76533ff37f9796004512a4bd289e743c28d5af718
-
SSDEEP
3072:Mn6mLR1n/ysMSsjiQV7afI6oDxlGA7+DoDCC5Mdh1b2P06zDfBB:wd1/y5TiVLoDmy+0DCXePf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10077489a3b5958810895250dbe2f267_JaffaCakes118
Files
-
10077489a3b5958810895250dbe2f267_JaffaCakes118.exe windows:4 windows x86 arch:x86
375ec3f0931958c8985d79e087a2c3d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetCurrentDirectoryA
LoadLibraryA
IsDebuggerPresent
ExitProcess
GetProcAddress
VirtualProtect
msvcrt
__CxxFrameHandler
??2@YAPAXI@Z
memset
memcpy
??3@YAXPAX@Z
Sections
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ