Static task
static1
Behavioral task
behavioral1
Sample
22fa4d924e90e02b49a161c56e6d54a0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22fa4d924e90e02b49a161c56e6d54a0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22fa4d924e90e02b49a161c56e6d54a0_JaffaCakes118
-
Size
603KB
-
MD5
22fa4d924e90e02b49a161c56e6d54a0
-
SHA1
c6e56d60ab1bd9bbeaf776255a22e6b9211ed675
-
SHA256
7f178774a4352156bdc80fd43d09802ba1046af0d5a227a0fd99c61d98753c13
-
SHA512
dd1a3eb278c37dab3ffcf2f9caf79b387c8da5d9cbe67cce6c684efe0388db95c9f2a7d3db7a06bbc5d9ae90d8a9647d65681616fd20a2d18f11e79d442d1be9
-
SSDEEP
12288:5g92lbh9/D8EFcqUt5smnX3i/Bj/+U24bo68ElyXVcqhM8ZsVaE:5tlNtD/mHt5smnC/BaooelylcqhM8+VR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22fa4d924e90e02b49a161c56e6d54a0_JaffaCakes118
Files
-
22fa4d924e90e02b49a161c56e6d54a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
58708828d5c31968bd59859804ecde67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
user32
MessageBoxA
Sections
.data Size: - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ