Static task
static1
Behavioral task
behavioral1
Sample
94843a69539438440dcb9a7163926bb6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
94843a69539438440dcb9a7163926bb6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94843a69539438440dcb9a7163926bb6_JaffaCakes118
-
Size
274KB
-
MD5
94843a69539438440dcb9a7163926bb6
-
SHA1
451cd8c29501f2e54ef2ffbb7b4bfca4a07055cd
-
SHA256
be9655a324abc7e601a2bd161d12fe666c30d7da92248521b5e92094dcad7ff8
-
SHA512
4826c6bf02dca2bd6e48e278364c60d5a9f3c35324595f2957619e99bea11ecdcaee2ea1b9894047548f20b2ea4d58d92e99021c7d7a3835c2db14354b5812e3
-
SSDEEP
6144:keTIM3UDZKfJq7r6SMGwzIOPKM6jKABoesbIu:3k/VKhqn9MDhCMxACes0u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94843a69539438440dcb9a7163926bb6_JaffaCakes118
Files
-
94843a69539438440dcb9a7163926bb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
9dbce258302f6e5443e9f2a358ba5268
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetACP
VirtualFree
Sleep
ExitProcess
user32
GetMessagePos
CharNextA
winmm
timeSetEvent
comctl32
InitCommonControls
Sections
.text Size: 512B - Virtual size: 266B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewclnxt Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yhdvhfy Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ockzhzt Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
grpxdpj Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rgyknqd Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE