Static task
static1
Behavioral task
behavioral1
Sample
2dd06ba80c43656a00d6a8edf7feed9e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2dd06ba80c43656a00d6a8edf7feed9e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2dd06ba80c43656a00d6a8edf7feed9e_JaffaCakes118
-
Size
57KB
-
MD5
2dd06ba80c43656a00d6a8edf7feed9e
-
SHA1
ae5ab5c60c7180f5b6ccc3e0c82ed309a7914b78
-
SHA256
86280be30ab1733f73d49d72a2ac158f3cb5f9e9d3cde6383803100f7562d295
-
SHA512
4a915d611a7f620a5e8f98f296c3ad6c85845640baac8c8a6bfe639c4f22ebc07ec853ce74089029e3f3f6b45c0eefdd75d87b7f800927a8358abe8dc67fe54f
-
SSDEEP
768:F+5rzC096DUwpMvEClmECg71YF+FiT2GumgiIE4Lj2jRUPJFC1YW3fppH7SJt/Ub:EzCPpul3F7yFCDGSikUR4QYmxpHVb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dd06ba80c43656a00d6a8edf7feed9e_JaffaCakes118
Files
-
2dd06ba80c43656a00d6a8edf7feed9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fce7809a30096dee5d325be7178490ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetThreadContext
GetTickCount
LoadResource
LockResource
ReadProcessMemory
ResumeThread
SetThreadContext
SizeofResource
Sleep
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ