Static task
static1
Behavioral task
behavioral1
Sample
8220a5598d8c3f0c9a6e8f7dca815346_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8220a5598d8c3f0c9a6e8f7dca815346_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8220a5598d8c3f0c9a6e8f7dca815346_JaffaCakes118
-
Size
176KB
-
MD5
8220a5598d8c3f0c9a6e8f7dca815346
-
SHA1
b882629368b14396f981ecb666797a0370ebf561
-
SHA256
2c1956138cfedeae0448bfa5f4129c7b84869141029b62935b3e78617dc050d5
-
SHA512
3f523b7225910cb257ccdf61c002ed076e8d4a66e9ca4c00da5b1b04c330d8b771b588a7ff7223c2fa6bdf0d18b8c9d2e6d6b8a35083b2a66a3d1766abaedb15
-
SSDEEP
3072:vfyBAUCZYxCiOz1Q9ANqv0R355tikEnb51CcOhSQ8/WKDfffcDV5AmdgwKPGQ7F:XypL7OIAYvY3D01KhSXDnEh5rdc9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8220a5598d8c3f0c9a6e8f7dca815346_JaffaCakes118
Files
-
8220a5598d8c3f0c9a6e8f7dca815346_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f7bae63eebb0fb074f94659c7e654b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetModuleHandleA
FlushInstructionCache
VirtualProtect
GetTickCount
GetLastError
GetProcAddress
LoadLibraryA
Sleep
LocalAlloc
LocalFree
VirtualProtect
user32
wsprintfA
Sections
vX,UMqwH Size: - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
09Ocs&3+ Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
G2jVAd"` Size: - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d-Z:P`gU Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
oDI\\[-* Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE