Static task
static1
Behavioral task
behavioral1
Sample
9427df080c4e0c3c82b52569882e0031_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9427df080c4e0c3c82b52569882e0031_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9427df080c4e0c3c82b52569882e0031_JaffaCakes118
-
Size
13KB
-
MD5
9427df080c4e0c3c82b52569882e0031
-
SHA1
fbfdd01dc8c1c148dd7699f6ec9658c45632e056
-
SHA256
ffef1e1da2cdb5221786fbcaffdffa7ff0f939951589cb3fd1f112482cde3a8a
-
SHA512
8843aa5ce99a9b5253d5abff22d16bb15ac0a0cea05f5bdcb231cb8c444fdd57f2accce3d8b17fb1343e30443c7e608a015eacf888dd64941a322d0b87498416
-
SSDEEP
192:Y8ss+qX14/51DWHwHVgxVsbSjS32grWmNWhOBHMJa/fT6z5MfIJtC+iWsUB:YTRqq51DWHwHiswWFNnsJe6zqK0+iWPB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9427df080c4e0c3c82b52569882e0031_JaffaCakes118
Files
-
9427df080c4e0c3c82b52569882e0031_JaffaCakes118.exe windows:4 windows x86 arch:x86
fce7809a30096dee5d325be7178490ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetThreadContext
GetTickCount
LoadResource
LockResource
ReadProcessMemory
ResumeThread
SetThreadContext
SizeofResource
Sleep
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ