Static task
static1
Behavioral task
behavioral1
Sample
22f17ca7223c24965b392859e7d750ef_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
22f17ca7223c24965b392859e7d750ef_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22f17ca7223c24965b392859e7d750ef_JaffaCakes118
-
Size
47KB
-
MD5
22f17ca7223c24965b392859e7d750ef
-
SHA1
3a3c526836db64eddf5af8a2b9008aa72bb0d708
-
SHA256
58aa256e204d4452d47dd08d21ef5634d0e08a7d555ea81dafa18f70209924a9
-
SHA512
b6f096603fc58e44f302c910755b21886642d0a551317ef0ff439bc5fc82e0e5f99bc2c444088300e1de3c7ea97205c9d01052a4c515079fa1f43f2dae656746
-
SSDEEP
768:gFbY4gl94ZkhwFZxRenl9EKcHq1uAt3PWAPMYC9MEcEcnCfF77oh86muNncL7Fh:1X6khOZul9EKX1uAZWAPs9MVnCxs8buw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22f17ca7223c24965b392859e7d750ef_JaffaCakes118
Files
-
22f17ca7223c24965b392859e7d750ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE