Static task
static1
Behavioral task
behavioral1
Sample
879b6d614eace34e8fc02046b8f5b427_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
879b6d614eace34e8fc02046b8f5b427_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
879b6d614eace34e8fc02046b8f5b427_JaffaCakes118
-
Size
98KB
-
MD5
879b6d614eace34e8fc02046b8f5b427
-
SHA1
4863e62676771bc1a31f6cebfd0e1250462f31d8
-
SHA256
70995c78586eff971e21f5b4203f9570b1f89d564bce9161d8954ac68c361470
-
SHA512
699b1867f1a7c872b2b3b9cdc5bac69b9f4db433cb50cf2a435a9519bd5f568ae3b12e7bf6c57baacbe92f016e7872b6c07262fbf44e104ad5b7f901e4e82e93
-
SSDEEP
768:/t+ENBV7MR2xliIf5qst6pMRdYD5Vm1GGS3uNQE/ps:M6V7MRkiMRdALWHzuWa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 879b6d614eace34e8fc02046b8f5b427_JaffaCakes118
Files
-
879b6d614eace34e8fc02046b8f5b427_JaffaCakes118.exe windows:1 windows x86 arch:x86
3ac8c46ff3bfb9ae9783fe5a3aa05b04
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
HeapDestroy
HeapReAlloc
WideCharToMultiByte
TerminateProcess
CloseHandle
GetModuleHandleA
lstrcmpiW
GetProcessHeap
lstrcmpiW
GetModuleFileNameA
GetVersionExA
GetModuleFileNameA
ReadFile
LocalFree
TerminateProcess
lstrlenW
SetFilePointer
GetCurrentProcess
Sleep
DeleteCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
GetCurrentProcess
lstrlenW
Sections
.elfq Size: 87KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jbtr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wuey Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htcp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qwoc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mjny Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xkvv Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bcjw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fiyh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE