Static task
static1
Behavioral task
behavioral1
Sample
96342a793de82fbf1133024c3ebe79d1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96342a793de82fbf1133024c3ebe79d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96342a793de82fbf1133024c3ebe79d1_JaffaCakes118
-
Size
68KB
-
MD5
96342a793de82fbf1133024c3ebe79d1
-
SHA1
1be29af4cb5d30c10da7f9b3b7a20699d7085a02
-
SHA256
0c92e1cdb35ef6641907dab727283ee51145cbf1176a5ea333b15d6938d9111a
-
SHA512
a4f3a5503da8bdea2dcc92d41fa30bf6b638923fad8a8ea89f81b01e2a09b02a7261b1e4fdc74b4612f8d9017d3ce43899d4687983d0fe0a0f6539d87f7d4f0c
-
SSDEEP
1536:/eYU8N8CocuR7ZPFN50BbZG8fjXD1yq1nryahoB/F5m2XXs6GLpoTg3leZW:TN8muR7jT0B9TfzDt1nLhi5pHsZLCgR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96342a793de82fbf1133024c3ebe79d1_JaffaCakes118
Files
-
96342a793de82fbf1133024c3ebe79d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd227ba966c127e93fe82f25f211eaca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
user32
wsprintfA
MessageBoxA
Sections
.data Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE