Static task
static1
Behavioral task
behavioral1
Sample
769836ff70fd445ea0e4fe2e5fa8e7e7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
769836ff70fd445ea0e4fe2e5fa8e7e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
769836ff70fd445ea0e4fe2e5fa8e7e7_JaffaCakes118
-
Size
76KB
-
MD5
769836ff70fd445ea0e4fe2e5fa8e7e7
-
SHA1
c1849d1da96c0423ecb487b7622ef31c8f407516
-
SHA256
54b9cbcd289c63f70ca85b558df6c85bed733fe7df80702190688ed0c290eb89
-
SHA512
3938fb110aebc293c22637bb44dac8a1375a52231e47782ed337dcf17921a598d011da34b6c571f36155936af997bb1abef23f9017441352d8c37a3b78e01a5c
-
SSDEEP
1536:ZaWLAmv5j3QTSXC53lXhhp5BpjVrs2ryrd1vUQuq6:ZJBj3OSXC53lXd5BHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 769836ff70fd445ea0e4fe2e5fa8e7e7_JaffaCakes118
Files
-
769836ff70fd445ea0e4fe2e5fa8e7e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
7bb062b0da29ca2a8a520ae18b756cad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibraryAndExitThread
GetCPInfoExW
GlobalAddAtomW
SetProcessAffinityMask
lstrcmpA
LZInit
GlobalFindAtomA
MulDiv
SleepEx
GlobalAddAtomW
GetDiskFreeSpaceW
GetPrivateProfileIntW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE