Static task
static1
Behavioral task
behavioral1
Sample
315db25c349ff87caf2730eeffa40716_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
315db25c349ff87caf2730eeffa40716_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
315db25c349ff87caf2730eeffa40716_JaffaCakes118
-
Size
35KB
-
MD5
315db25c349ff87caf2730eeffa40716
-
SHA1
dc779e5872a663d0054ce2bebe129daf08a3dfff
-
SHA256
9f421ece6a6dbed340ca1da5c75fc583b36e992cef676a71dfdfefab70c99700
-
SHA512
8e7ad0da62eed75d228f8a1cb256b5fe6f68e04a2c64ea32656b88d6d5e020f443a2c6cebf6b34571b1c19542c4d4119ea0277232fc3d6217d5f974f1d1d01d5
-
SSDEEP
768:+jJCnsixvuL3V7JoNzLwh3qoNgUaLZmjzYnP7RhRvxaq2Y1rq0:+javkJoNnwhFNutKEFXvxaqHs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 315db25c349ff87caf2730eeffa40716_JaffaCakes118
Files
-
315db25c349ff87caf2730eeffa40716_JaffaCakes118.exe windows:5 windows x86 arch:x86
e341c9be2bbb82e6b8d6972209695225
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateFileA
FindResourceA
FreeLibrary
LoadResource
WriteFile
GlobalAlloc
SizeofResource
GetProcAddress
SetFileAttributesA
LoadLibraryA
IsWow64Process
LockResource
GetModuleFileNameA
CloseHandle
GetTempPathA
ntdll
RtlUnwind
memset
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ