Static task
static1
Behavioral task
behavioral1
Sample
665478cf460bed864115affe85fba3af_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
665478cf460bed864115affe85fba3af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
665478cf460bed864115affe85fba3af_JaffaCakes118
-
Size
62KB
-
MD5
665478cf460bed864115affe85fba3af
-
SHA1
ecbffe0a484ea23a52ba2146dd88caaf9686d709
-
SHA256
7ce7333d5b95a73e8525a78861e5d02125a2864edbc043df60d1b064ce339e21
-
SHA512
8f39028a284b7232276a10cbfed837218f15a41a95bd22a08c290ea5fe8a8575c637ba7891e49840f32c80c99af367c2e3a7843f22c25f2cc2ac7415071d5f64
-
SSDEEP
1536:zesJ9fLc7G2G5nr3OxGaXeGFdQTWBuC1aCHP+D5C5Z2:9J9fLc7G22OxGaXeGFdQTuuC1e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 665478cf460bed864115affe85fba3af_JaffaCakes118
Files
-
665478cf460bed864115affe85fba3af_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 14KB - Virtual size:
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE