Static task
static1
Behavioral task
behavioral1
Sample
63316f3ce84ddf2b1d46c9baa666e924_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63316f3ce84ddf2b1d46c9baa666e924_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63316f3ce84ddf2b1d46c9baa666e924_JaffaCakes118
-
Size
385KB
-
MD5
63316f3ce84ddf2b1d46c9baa666e924
-
SHA1
e9c9b1bab4553b8ce68de906edfb249c9460c922
-
SHA256
0899f4a3afb87dabaf35b74c4e5ce24a6f2b21e3a97bb92bb91fe9730c490221
-
SHA512
98072987d6b6fab6f7c63acef5354811e99697ddd7569f446898b9fb2b72349fc45ab59cb6c04d6f415333994c3a1955d8b168852451d1863fe02b10fcdedefc
-
SSDEEP
6144:+9bzIez8GrKkdYBRld+0R0YVDtOHsNfNgulYYlNV62tiJITuR6LLlt0E:wnWTkdYdlR0stOI2iVxEOTuR6VKE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63316f3ce84ddf2b1d46c9baa666e924_JaffaCakes118
Files
-
63316f3ce84ddf2b1d46c9baa666e924_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e1f282449492d5fc7a87e6f1c3ced5d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc
user32
wsprintfA
MessageBoxA
Sections
.data Size: 347KB - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ