Static task
static1
Behavioral task
behavioral1
Sample
64ace02580332dbdd79eaafbbe3c5366_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64ace02580332dbdd79eaafbbe3c5366_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64ace02580332dbdd79eaafbbe3c5366_JaffaCakes118
-
Size
66KB
-
MD5
64ace02580332dbdd79eaafbbe3c5366
-
SHA1
558877829281247906754c4c0481431700680881
-
SHA256
cab1c8ccc7d3b092f2a9caa464dd90006ff21d19892daac2435a1e501c8679fc
-
SHA512
a40232e6fc4b91414ad5e629335add8cdd4073de3662bc0a2fe9a7e26f1cbcef87df3907dbf2a64dc01be39989c31b2cd2c416b7cb6a0fd8676e11e58e3a1c6c
-
SSDEEP
1536:9Qobc2JVmBGWxrwy73CWCTCfp/ply9dxeQafJO2T/yaJqGjW:9VYW4BdMm3CTCfp/iFeQaBO2TyaJqcW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64ace02580332dbdd79eaafbbe3c5366_JaffaCakes118
Files
-
64ace02580332dbdd79eaafbbe3c5366_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3ed43a7ea29001e1e1c6ccb7479c928
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreateTagsW
FileTimeToSystemTime
GetConsoleCP
EnumLanguageGroupLocalesW
SleepEx
LeaveCriticalSection
CreateThread
FindResourceExA
GlobalWire
SetCommConfig
DebugBreakProcess
IsBadWritePtr
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE