Static task
static1
Behavioral task
behavioral1
Sample
409a7cadbe439eaad85db80ac5aa1153_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
409a7cadbe439eaad85db80ac5aa1153_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
409a7cadbe439eaad85db80ac5aa1153_JaffaCakes118
-
Size
444KB
-
MD5
409a7cadbe439eaad85db80ac5aa1153
-
SHA1
4241e94959e5e75b5d3337a37305047cc7d8d7fe
-
SHA256
62333ad09d48d50acc8de0316a967f2082b3bd0b6060672f76c76774b2736699
-
SHA512
03138bb08850c4374008d1384aab5562370c5b398cf99b41c303d9183abc6c624d3dcf6370b7796bd2c87c176a5c24331dc2b86bea4ba4b40bf18b96718d845c
-
SSDEEP
12288:KKbnhU1xnPjtsLGb4epMDimiZ1+ELXmT:U1xBsLTnW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 409a7cadbe439eaad85db80ac5aa1153_JaffaCakes118
Files
-
409a7cadbe439eaad85db80ac5aa1153_JaffaCakes118.exe windows:5 windows x86 arch:x86
d904a43780d07d0633a644325b4bb687
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
GetProcessHeap
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
VirtualQuery
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetLastError
HeapSize
ExitProcess
TlsGetValue
user32
GetWindowTextLengthW
gdi32
GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
GetBkColor
Sections
.text Size: 250KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 183KB - Virtual size: 467KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ