Static task
static1
Behavioral task
behavioral1
Sample
234155e5a1db3a164b03155736364ba2_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
234155e5a1db3a164b03155736364ba2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
234155e5a1db3a164b03155736364ba2_JaffaCakes118
-
Size
27KB
-
MD5
234155e5a1db3a164b03155736364ba2
-
SHA1
4d7418de7dac855aad2ad5dc16a821db11c4a161
-
SHA256
90d83730b98e863bd104d664c99457c005a38877d1e5559ed6fa51de18ca80fb
-
SHA512
637c9223df02aa1addae4acfdbcbecbe8be4ce7767b4e2c524ddafcb736d0ad0a706c5d7d329aae7656c3503ff8ce6ab8c4f47db02152d7406175f3d026f80ad
-
SSDEEP
384:43h36a3IBLySJ2AgeGLwJEQwgnmywqfRh7HcUCd2bEbJo/nXQSDVt9BxGIMxbF:2h3k+SJ2AgVUJf9i9U0Q3D9BIxbF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 234155e5a1db3a164b03155736364ba2_JaffaCakes118
Files
-
234155e5a1db3a164b03155736364ba2_JaffaCakes118.exe windows:4 windows x86 arch:x86
e6ed844be4beb57ff8078e7326fde044
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
GetDiskFreeSpaceW
GetFileTime
GetLocaleInfoW
GetNamedPipeInfo
GetProcessHeaps
GetProfileIntW
msvcrt
_cgetws
_chkesp
_logb
_dstbias
_eof
_errno
_execl
Sections
.text Size: 18KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE