Static task
static1
Behavioral task
behavioral1
Sample
704c1bfe7312676a26ac869f841fcc5c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
704c1bfe7312676a26ac869f841fcc5c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
704c1bfe7312676a26ac869f841fcc5c_JaffaCakes118
-
Size
504KB
-
MD5
704c1bfe7312676a26ac869f841fcc5c
-
SHA1
8371407a42452b5d8dbbf2ebce17c6cd3c65feeb
-
SHA256
25ab269eca5e29ee126ca30c68fc2739f21a154cab4f5e7726deabc95c1b5ec0
-
SHA512
718cd32a404f6890d71712659dfe1b9b91554cee63a43acd11ee27d3ee23d216f1707840ecb43c6f4416e8fdae3226152449dcc4ca79620176722b9ad2d02c0a
-
SSDEEP
3072:+cCJ6tIkC4+D6nfNu46cRB07f9YjTREb5RITWb5A/1G:7CJyIkKD6Fu469YZEbmW1j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 704c1bfe7312676a26ac869f841fcc5c_JaffaCakes118
Files
-
704c1bfe7312676a26ac869f841fcc5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
076655dd73d54f023d8b6225d33f35bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
CopyFileW
CreateDirectoryA
CopyFileExW
IsDebuggerPresent
GlobalGetAtomNameW
GetTickCount
LoadLibraryA
Sections
.text Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE