Static task
static1
Behavioral task
behavioral1
Sample
6f25efd8860e13a6370eefaabc4f3ae3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f25efd8860e13a6370eefaabc4f3ae3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f25efd8860e13a6370eefaabc4f3ae3_JaffaCakes118
-
Size
190KB
-
MD5
6f25efd8860e13a6370eefaabc4f3ae3
-
SHA1
2958d5f6596f6ba496062fdcdea888695c3f4db8
-
SHA256
aea558ffd41484b00fec407aa9cf63fd26a08eaf55c7a4a2dced421a0c78fc71
-
SHA512
92191445f77e44dc0a2b13b8c288bb663528e11af1373e8789cb221ea1f029621e563b3253964e8350a12d86564a23af9945e97d3b2138c53d302d0ed00da3f7
-
SSDEEP
3072:ZMkOna356KdrdO+ecu8dXjPvr2KyaoFfjL0tzgx0lKVRCutsbFZHEw:wn055T5Jjr2ZxAgPVRCF59N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f25efd8860e13a6370eefaabc4f3ae3_JaffaCakes118
Files
-
6f25efd8860e13a6370eefaabc4f3ae3_JaffaCakes118.exe windows:4 windows x86 arch:x86
ce23e17c1503f46f6b582910f25dd599
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetProcessPriorityBoost
InterlockedDecrement
ReadFile
Sleep
TerminateThread
DeleteCriticalSection
EnumResourceTypesA
GlobalLock
WriteFile
CreateFileW
CreateProcessW
GetModuleFileNameW
GetModuleHandleW
CreateEventW
GlobalAlloc
GlobalUnlock
ole32
GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2
imm32
ImmAssociateContext
Sections
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ