Static task
static1
Behavioral task
behavioral1
Sample
338bac6d5492a489c28a4af2f4481a8f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
338bac6d5492a489c28a4af2f4481a8f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
338bac6d5492a489c28a4af2f4481a8f_JaffaCakes118
-
Size
78KB
-
MD5
338bac6d5492a489c28a4af2f4481a8f
-
SHA1
7fc957a6853af5ae1efc8457733e78a33f158fa8
-
SHA256
41fef5b4bc196ba099d88695badd7401c8de1ffab78e7be6fa45f791d46cb24f
-
SHA512
dbe930d3a20a74dc7c9dcd9aef8347b834dfd6f217e1682455908d359bba387979bd358dc8597b3d6a30a1b48d7e09c848a97aa212acf2a4de49a890086ab0f5
-
SSDEEP
768:kp1h22tZmttttt/ArY1tBdSXPv+91w5HcNUyKmmcEq0OO11ogUT2Ss3pCO80xRKl:u28eUY1tBdbs8Gy1MRr40byz1+8rWL8N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 338bac6d5492a489c28a4af2f4481a8f_JaffaCakes118
Files
-
338bac6d5492a489c28a4af2f4481a8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 647B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 254B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE