Static task
static1
Behavioral task
behavioral1
Sample
4995eaabaca6d39aecffef65a39b27aa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4995eaabaca6d39aecffef65a39b27aa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4995eaabaca6d39aecffef65a39b27aa_JaffaCakes118
-
Size
340KB
-
MD5
4995eaabaca6d39aecffef65a39b27aa
-
SHA1
04cd6ff07bb76521e6215b60a15ed8bab92c983f
-
SHA256
32295a5326dd959f63b1a440df6b6182852edfa9251c7cebf709aef6c56bea51
-
SHA512
82c69b52c7a4f23ca833db637ff97cffe117165adde2780f2c0e877a41c5262821aefb3c0aa34c63443191c6f2b4ef2bcb44e8419649afe3cb0924e5d86e17ec
-
SSDEEP
6144:rXTfr0ppQh6nEXVhfbsScdiYjS6sKvDvBXes8J6vfvUicwTs2YVrN681:rj3jXVhI9RS6s0uofvHccs3VUC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4995eaabaca6d39aecffef65a39b27aa_JaffaCakes118
Files
-
4995eaabaca6d39aecffef65a39b27aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
9a34362febb5b900b3f5282440c82e7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
HeapCreate
GetLocalTime
HeapFree
GetLastError
GetModuleHandleA
HeapAlloc
GetProcAddress
advapi32
CryptGenKey
ConvertStringSidToSidA
ConvertSidToStringSidW
DeleteAce
CreateWellKnownSid
CryptExportKey
CryptDeriveKey
CryptCreateHash
avifil32
CreateEditableStream
winmm
midiInClose
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 196KB - Virtual size: 637KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ