Static task
static1
Behavioral task
behavioral1
Sample
89de53c2c38b6c93d8386f267710a17e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
89de53c2c38b6c93d8386f267710a17e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89de53c2c38b6c93d8386f267710a17e_JaffaCakes118
-
Size
324KB
-
MD5
89de53c2c38b6c93d8386f267710a17e
-
SHA1
f29ce4b8115dd25df427b3d0339342ada81f20a2
-
SHA256
f0e27d94376fc185ebeb49517524ccf496893658ada084ae1b100662f04fb958
-
SHA512
a5bed5427bed21f68401a6ac5a399dec7123d1b0e89afcdd3cc19fd37a3b57b989b7d319c0bd26f10244c00903bef74500b0016a561c10f43d1fa1cdd8b2c68c
-
SSDEEP
6144:unhELzVR/Mq39M+oT+v2/SjNjO4kx0WEete5iSRjXFgf:phRd++E+vQSjNrkx04te5iS5af
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89de53c2c38b6c93d8386f267710a17e_JaffaCakes118
Files
-
89de53c2c38b6c93d8386f267710a17e_JaffaCakes118.exe windows:4 windows x86 arch:x86
0bf62e9c9fc7d02d903d8ef0815ce9c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
memcmp
memcpy
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
GetEnvironmentVariableW
Module32First
Heap32ListFirst
user32
GetMessagePos
ole32
CoInitializeEx
CoUninitialize
advapi32
RegEnumValueA
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ