Static task
static1
Behavioral task
behavioral1
Sample
22e9dd7892f75f8b99681cd905aa17f5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22e9dd7892f75f8b99681cd905aa17f5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22e9dd7892f75f8b99681cd905aa17f5_JaffaCakes118
-
Size
165KB
-
MD5
22e9dd7892f75f8b99681cd905aa17f5
-
SHA1
93f3d68a88982808581a5fbe61e5c6c468653d81
-
SHA256
6efff63f6dab6e4a9959a721e73ffa7cffd11541e8e7d0ecca1559a096766707
-
SHA512
187df3e2156598a8d7756a240e6327d7ffc1919e0538d7f99ee9826698007420546d0ec9fc5a4e63de8a244254233772f3bdc1d6f7bf9e52330bfab35422cc9e
-
SSDEEP
3072:ZD5E/+7uNW/il/K420oMnWy7x6NKmp5+9i+y1jdljz5T4LPx+XGnX14kXODiq357:ZD5EG7dil/KjbMnWy9G/5lN0p+XGnf27
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22e9dd7892f75f8b99681cd905aa17f5_JaffaCakes118
Files
-
22e9dd7892f75f8b99681cd905aa17f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
aed117a04acd55b5aa0ae2f98c418f30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
gdi32
CreateBitmap
Sections
.text Size: 1KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 153KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 282B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 1KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
yemqqzp Size: 1007B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE