Static task
static1
Behavioral task
behavioral1
Sample
9ff49d2224c8579cd681f58c43029801_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9ff49d2224c8579cd681f58c43029801_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9ff49d2224c8579cd681f58c43029801_JaffaCakes118
-
Size
168KB
-
MD5
9ff49d2224c8579cd681f58c43029801
-
SHA1
cc6304a8076a056630ba846e50ef24e383a684be
-
SHA256
34d6a68fbcce2c1c873b94df1dc44f9020f1f558ea7962da04a7e3af555dc95d
-
SHA512
2838d73e2a853f2405523ac256c1c4778302521e0eed11dbcb6f06b55aec3bdfdff031bc96adb6223c77b4c7c4f453729bb4f8aa469e42e53338dec487936233
-
SSDEEP
3072:QHSRkT0wVj8cpqDArYSbeorNB7xdJaJjwrfukw30nh8xCTryayKqSbNO8t:QHMHcj8cpIArYSdR+J8rf1Fnhp+zKzOG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ff49d2224c8579cd681f58c43029801_JaffaCakes118
Files
-
9ff49d2224c8579cd681f58c43029801_JaffaCakes118.exe windows:4 windows x86 arch:x86
22aa25a9dbb99211db866b1a30897dd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetModuleHandleA
GetFileSize
FlushInstructionCache
GetTickCount
VirtualProtect
GetLastError
GetProcAddress
LocalFree
LoadLibraryA
Sleep
LocalAlloc
ReadFile
VirtualProtect
user32
wsprintfA
wvsprintfA
Sections
G!MwD);[ Size: - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
TU"6*Cuj Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
u3PFOab@ Size: - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9/#[RSw* Size: - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
45HC:/>? Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE