Static task
static1
Behavioral task
behavioral1
Sample
844cc51ca06c31ef84ea5759c5ef4694_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
844cc51ca06c31ef84ea5759c5ef4694_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
844cc51ca06c31ef84ea5759c5ef4694_JaffaCakes118
-
Size
93KB
-
MD5
844cc51ca06c31ef84ea5759c5ef4694
-
SHA1
20028e7a12094f138f5fd03bb4e50d9a444b7193
-
SHA256
fe32030802fcb8755f0dabd37678dda8606f9b78c5dab1139e9583b3d78aac57
-
SHA512
2bc4cdc574e240a524ebbf37d7e77249b590b94fdfff726092caa124deef4e08fcc6d2588bbf4afa4a29bc723e52c825548608aa79e2f074ea9ba815ac5b5b82
-
SSDEEP
768:TNhmcmt7t5RUfZCXX5ttoCqnl/nlRyY7ROObYHB7pdP2ISuVafG7YdHOLl8/41k1:xQ50Dr9zilTOILVaWYdsL1Qym64l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 844cc51ca06c31ef84ea5759c5ef4694_JaffaCakes118
Files
-
844cc51ca06c31ef84ea5759c5ef4694_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b473bd797b2e95c2de40ca6a980792a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
Sleep
VirtualAlloc
GetModuleHandleA
VirtualFree
ExitProcess
Sections
.text Size: 512B - Virtual size: 238B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 197B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsfwer Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ