Static task
static1
Behavioral task
behavioral1
Sample
822e9891dc7813db4b5a38ad5341f969_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
822e9891dc7813db4b5a38ad5341f969_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
822e9891dc7813db4b5a38ad5341f969_JaffaCakes118
-
Size
138KB
-
MD5
822e9891dc7813db4b5a38ad5341f969
-
SHA1
7d1d6aa3844927cc45c5cc4214498840c492a788
-
SHA256
9e85771f8bc40cb5d44aa5f174d14e09149bd5e3231b901b190677872157c120
-
SHA512
b76622daa1b888f73c723202d10e3475f6bb5d58777229e5d5ae82ebe947b285e93dd2bbb50c8297f9f404e0bbf44af8e774cb99309e586410d2e9396dcdc83c
-
SSDEEP
3072:jgec0/OvXoQhnrby3jTwcedF0MuaLsYfbHFKf2:bc0ohnreTTw/Z8GbHFKO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 822e9891dc7813db4b5a38ad5341f969_JaffaCakes118
Files
-
822e9891dc7813db4b5a38ad5341f969_JaffaCakes118.exe windows:4 windows x86 arch:x86
39b772f9e6bfca3e20e0403416afb6aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetModuleFileNameA
GetThreadLocale
IsBadReadPtr
LocalHandle
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE