Static task
static1
Behavioral task
behavioral1
Sample
283588eb5c724d74138399cd73822269_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
283588eb5c724d74138399cd73822269_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
283588eb5c724d74138399cd73822269_JaffaCakes118
-
Size
360KB
-
MD5
283588eb5c724d74138399cd73822269
-
SHA1
f4d7ce34c712acb5d3205e89e7a33452c9c9e41b
-
SHA256
dde249554c7eada4f147401a348288aca06f2705c5eb51d926346d7049a31205
-
SHA512
a9cbfe6a4401694507c22b2132438aa04143d886299ca8d2eb1837bbc9fa66996b8c9b5f0004fefac49e48d6401dcb5b9ed7421a176023b8bb074e625a0e7689
-
SSDEEP
6144:6TuBlsJx30vus/UOe7WzwDHXF/F++7+emauK7kD0dVBfQALB8msdx/chlEwX8:6Kor7qjz0ho6o5CzQAqmsz/+jX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 283588eb5c724d74138399cd73822269_JaffaCakes118
Files
-
283588eb5c724d74138399cd73822269_JaffaCakes118.exe windows:4 windows x86 arch:x86
ac46fd45e5f1c02c5fb1c124e80be9ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
Sleep
ExitProcess
GetLastError
GetModuleHandleA
VirtualFreeEx
GetSystemDirectoryA
GetProcAddress
advapi32
CopySid
AddAce
ole32
CoUninitialize
avifil32
AVIStreamCreate
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 466B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ