Static task
static1
Behavioral task
behavioral1
Sample
9642d1bd01be79a130b077740cd6bae7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9642d1bd01be79a130b077740cd6bae7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9642d1bd01be79a130b077740cd6bae7_JaffaCakes118
-
Size
132KB
-
MD5
9642d1bd01be79a130b077740cd6bae7
-
SHA1
7fbd804241de84991f3f2864c9a2013a50caa79f
-
SHA256
c14e61cb888e6c92521f3fadfbd8d7f56738851e49bec7d08d617804c817e0a2
-
SHA512
93e6055df83eaeda46a239f6c25c5438a0d8aa10d94700b5f96f2dcc84fbd6044a0f1e50df0a8b41f9d3a37b8657122107dcfe8c95d1af8db09a8df78d1246a2
-
SSDEEP
3072:Z4N6glCitekE5CnWRvP41ndgMecpA+QHoFAN:2CiAjonc341naMpAoFAN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9642d1bd01be79a130b077740cd6bae7_JaffaCakes118
Files
-
9642d1bd01be79a130b077740cd6bae7_JaffaCakes118.exe windows:4 windows x86 arch:x86
de8d918bb20ca5c91e4fb1b4badc08a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateActCtxA
DeactivateActCtx
GetProcAddress
LoadLibraryA
GetModuleFileNameA
VirtualProtect
ActivateActCtx
Sections
.text Size: - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_rdata Size: 4KB - Virtual size: 266B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_data Size: 4KB - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ