Static task
static1
Behavioral task
behavioral1
Sample
2714336deabbe65e40f6218a2d824eda_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2714336deabbe65e40f6218a2d824eda_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2714336deabbe65e40f6218a2d824eda_JaffaCakes118
-
Size
235KB
-
MD5
2714336deabbe65e40f6218a2d824eda
-
SHA1
82e9d755c7fdafd1e360920e8bad204595bcfdce
-
SHA256
674032a328d021604649cb6a8bfece169930b7a704332892e799f6b82430da70
-
SHA512
929efbeccc3a240f8ec3a4866d2a9417cbfada7daa98ec426d23e6f16295645065982ad0a2580c48e18ef635d7c9cf2831a0acd9b1e5c73f07f1d800d61a901f
-
SSDEEP
6144:sXe2xmPnvoFX04NzvE+sGYnEXN8/LYVbHXFqLRuvQ:Z2oPnvoFXtNbEDBnE+YlsFyQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2714336deabbe65e40f6218a2d824eda_JaffaCakes118
Files
-
2714336deabbe65e40f6218a2d824eda_JaffaCakes118.exe windows:4 windows x86 arch:x86
b54221a884be7a3e82da70ccbd5f1d98
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
Sections
.text Size: 232KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 17B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE