Static task
static1
Behavioral task
behavioral1
Sample
374959e75140229eab399b195777aff5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
374959e75140229eab399b195777aff5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
374959e75140229eab399b195777aff5_JaffaCakes118
-
Size
116KB
-
MD5
374959e75140229eab399b195777aff5
-
SHA1
dee17032c8d6099c2350f336afd42004408c26e8
-
SHA256
0b734d62ba3a017a2dd3e681384dbf4b9faaff4aeb7ea893999854d7aa7bb3ba
-
SHA512
28fc06044f3cf10ab952b39403e27644ec39affe6a625f1ae491bb89a0519458f89fc2c4b69d163f5229311061e478f3e5a2ebe1ab02ba65017aaccbdd72134b
-
SSDEEP
3072:hNL1yAqJgkP1Gmc2iybH127RbHwHCypK:xyAqF1Gmc2imH12p8Cy0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 374959e75140229eab399b195777aff5_JaffaCakes118
Files
-
374959e75140229eab399b195777aff5_JaffaCakes118.exe windows:4 windows x86 arch:x86
539831e5a0558e12a278314af954abdf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
SetLastError
VirtualFree
GetDriveTypeA
Sleep
ExitProcess
user32
CharNextA
Sections
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Hbhgso F Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Utmiblcs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Fntxfphp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 253B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE