Static task
static1
Behavioral task
behavioral1
Sample
701f62ec8499fc2ee804bb63b929ff80_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
701f62ec8499fc2ee804bb63b929ff80_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
701f62ec8499fc2ee804bb63b929ff80_JaffaCakes118
-
Size
68KB
-
MD5
701f62ec8499fc2ee804bb63b929ff80
-
SHA1
0e0c20b8be063186b35868b4f6a44164a43e0f96
-
SHA256
a0f3db208d1a7928fb4969f55e6afeb59b3378ebd43aeb9704406cb96724cd8e
-
SHA512
2d3b5db1776b559cbdbaa701cbc887fb106f5dcb238f347bc2378fcba2d7d967fccc68d48bd6d962248f4624d3806ee5c2e09400d9a75c1ca63dea924f4ea21d
-
SSDEEP
768:fJzMfZ6K/l1oOR8k1ZPZFXqZJlOrse6w:f9wLlmOXZbXmzR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 701f62ec8499fc2ee804bb63b929ff80_JaffaCakes118
Files
-
701f62ec8499fc2ee804bb63b929ff80_JaffaCakes118.exe windows:5 windows x86 arch:x86
9b7a43a087508c23068e9d3b34fd3b41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetStartupInfoA
GetProcAddress
LoadLibraryA
GetProcessHeap
VirtualAlloc
advapi32
RegOpenKeyA
RegCloseKey
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet7 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet3 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ