Static task
static1
Behavioral task
behavioral1
Sample
6998164ed3e0958e88e594159d0eb9f9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6998164ed3e0958e88e594159d0eb9f9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6998164ed3e0958e88e594159d0eb9f9_JaffaCakes118
-
Size
35KB
-
MD5
6998164ed3e0958e88e594159d0eb9f9
-
SHA1
d02615a4037c559df1ba81f9baa1ba76adc71609
-
SHA256
09d582e2f086e480a26f06f561597ceb0912e020ea27b5690f6cfa1e78faae44
-
SHA512
02be314852bd36f73cb6c0f60ee7d6c15525fb28333c4b88183f182670e2a7052dd5ddc68ba141d60cb51d85dd29491c56125f00f073daf391482cffd39d1a18
-
SSDEEP
768:uYBymwvfKtmp9QqN0M+MbVWdpNui+l7Hjn+bUuX2:LonMcQqN0mRWUi3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6998164ed3e0958e88e594159d0eb9f9_JaffaCakes118
Files
-
6998164ed3e0958e88e594159d0eb9f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f26165383917cda1f24c53996fbc4d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateThread
FormatMessageA
GetComputerNameA
GetDateFormatA
GlobalAlloc
LoadLibraryA
LoadLibraryW
LocalFree
MoveFileW
ReleaseMutex
SetErrorMode
SetEvent
Sleep
TerminateThread
WaitForSingleObject
WriteConsoleA
lstrlenA
user32
DispatchMessageW
GetWindowThreadProcessId
IsWindow
LoadCursorW
LoadStringW
DestroyMenu
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE