Static task
static1
Behavioral task
behavioral1
Sample
64647a719c272ce242fc2230a645b9c2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64647a719c272ce242fc2230a645b9c2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64647a719c272ce242fc2230a645b9c2_JaffaCakes118
-
Size
26KB
-
MD5
64647a719c272ce242fc2230a645b9c2
-
SHA1
1f44f7d18ab5fd5731a3cd2bd86f7e4e26b6d2fc
-
SHA256
e08ebc0657c359cd23811fcdcac714aae7e758f3aad51c00420c8db72076950e
-
SHA512
a690ec5427b41aab59b614f854171e201b01ef8c01b46088fc1488fedf88ff199f573025bd3194f1e9e5f3fe9187961cd65e4ebf3d84ad31e868a9d9cc0cf3b6
-
SSDEEP
384:wp8/+IzenKUL1UQTkvReAJPpdwErGtZPOCCghApKeEU5PDNXpo5ahZ:we/+WeR1hedprAPrLhCREmNXC5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64647a719c272ce242fc2230a645b9c2_JaffaCakes118
Files
-
64647a719c272ce242fc2230a645b9c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
b79f9b181e53b8dccb4c4bb13f08e34a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ntdll
ZwOpenEvent
_snprintf
_stricmp
strchr
RtlImageNtHeader
Sections
.code Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE