Static task
static1
Behavioral task
behavioral1
Sample
94813bd705a710f97f6e685efa84c06b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
94813bd705a710f97f6e685efa84c06b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94813bd705a710f97f6e685efa84c06b_JaffaCakes118
-
Size
120KB
-
MD5
94813bd705a710f97f6e685efa84c06b
-
SHA1
2da9bac8bd38cacd41e405af51b1fcc3f10d7e0c
-
SHA256
b7b5892863740fc46eef004beead7bc308301c76b7a5271de62d3cf549151881
-
SHA512
e50d7046b6621cde08f480d51dd0a1cd253fa7281942107b19a0796952a061a20e186cfbca60f81c7f122305b73b2f0cad6de9aaa1fa7e9364508a71d4dc15c6
-
SSDEEP
1536:IlPy2FQhdMcL6a5ZSgoNWDDFq3NbJZqQ76fofqEEYAteKt0kRlBrThP0YL:r2Ie/oDD+D77iEZ7s0kRlBvhJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94813bd705a710f97f6e685efa84c06b_JaffaCakes118
Files
-
94813bd705a710f97f6e685efa84c06b_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ede871f504dee75b485f08c01cf3ea1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 40KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 48KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE