Static task
static1
Behavioral task
behavioral1
Sample
87655e51363d6b9e036cf052283d8534_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
87655e51363d6b9e036cf052283d8534_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87655e51363d6b9e036cf052283d8534_JaffaCakes118
-
Size
1.2MB
-
MD5
87655e51363d6b9e036cf052283d8534
-
SHA1
a798a1bc902da587d87ada31477b7c3f9488ae6d
-
SHA256
0b0baac14b09307f83fc6cc9ccea8895a6c1255deff301a380e404149e53d960
-
SHA512
079c7f9d3be8fc6c78c325e30994095d573ad0fae5e865c4ab91b9b1e3c4c763adb376e94ac43b817d19e5c8d6176c84b8c321c26d19603e7db901dc8f56d63d
-
SSDEEP
24576:/Kk24mmciRZ/uLvUrTWZNOcVlO+JvJ6PmH89DtjyaYvkBB0BFiZjrR:/Ubm5j/KveTWZNOYJvJN83skBciZjr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87655e51363d6b9e036cf052283d8534_JaffaCakes118
Files
-
87655e51363d6b9e036cf052283d8534_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb78842d86e3a45cce927bbfdeee0fc4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SetFilePointer
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetSystemMetrics
advapi32
RegDeleteValueA
oleaut32
SysFreeString
Sections
CODE Size: - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 475KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp2 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ