Static task
static1
Behavioral task
behavioral1
Sample
22a64c89d23d35c6185d65807a66d0b3_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
22a64c89d23d35c6185d65807a66d0b3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22a64c89d23d35c6185d65807a66d0b3_JaffaCakes118
-
Size
7KB
-
MD5
22a64c89d23d35c6185d65807a66d0b3
-
SHA1
8a8c8b674a0defb647b57b6422c3d11b44103ba2
-
SHA256
032470a2ad2190e7f28fa649d86c5e9d566711715dc0d0d683569aac0825029c
-
SHA512
e67dd6ee799064b3e7bfa73dd1b53e6b80dd02ebd2d5d2ad0f1c93e1b773ec0eb1a6be83a2d4793a96b1bfdee76638c0d10eb1fc89d27936f77e69acce7c2cbf
-
SSDEEP
96:HEEANffrQ1YGZBkQl703tq6TEhfSADCcjSAYZHavaKqk+l4sIx4q:HiNnr0hoY6TEhf3DCzAYZHaJqPPq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22a64c89d23d35c6185d65807a66d0b3_JaffaCakes118
Files
-
22a64c89d23d35c6185d65807a66d0b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
573a8e3002c3a49e385a632af519e901
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
Sections
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE