Static task
static1
Behavioral task
behavioral1
Sample
693c33583bce09aadcd41523017a6a4d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
693c33583bce09aadcd41523017a6a4d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
693c33583bce09aadcd41523017a6a4d_JaffaCakes118
-
Size
23KB
-
MD5
693c33583bce09aadcd41523017a6a4d
-
SHA1
f22aea0391cb2bfe386ce93a3a99aeb35e7d6087
-
SHA256
a9194a374c39c9a364f169c08f50d9460636824fcf54ebeec94b4ca20482173a
-
SHA512
7469c4909e1182b56dd0b1e3f8c211560a88022e26929b21cf5a02df639bcf35a9fd1dc259928d623ed114aa9b5ed00d2af32ef6e3a600e8ac97dec2ef755a9e
-
SSDEEP
384:JxJiiNnZEnGcoXgrA9a5DoFiUuAqzsQM4rzVCjvWnCzDR/RxZHhnxyS2JK4cRs0k:77CGJahoFH4rZCrXDRpxrMS2KP1nKSQ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 693c33583bce09aadcd41523017a6a4d_JaffaCakes118
Files
-
693c33583bce09aadcd41523017a6a4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f446ad4ac5ffa1483424b56aab21cbf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProcessMemory
GetProcAddress
LoadLibraryA
VirtualProtectEx
CreateProcessA
GetCommandLineA
SetThreadContext
GetThreadContext
ResumeThread
gdi32
SetTextColor
CreateDCA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE