Static task
static1
Behavioral task
behavioral1
Sample
a448513336aeeff4557529fd6a263d9c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a448513336aeeff4557529fd6a263d9c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a448513336aeeff4557529fd6a263d9c_JaffaCakes118
-
Size
76KB
-
MD5
a448513336aeeff4557529fd6a263d9c
-
SHA1
11ea03938eff62f59a0cc3eef683870d77233afe
-
SHA256
eb5ab6d16be0725f9e9efedbe2ba037cd58da87fa51b66dc3407f53f51e6855e
-
SHA512
b6e10d9825225ec288aa6bfbc5a7a2533cbeb4db4fb8905283b2c5e8c5d355ae2e4093f8351bbba7a409ed8ab42fc04474c63eb2e033bfcac0e797a98879bac7
-
SSDEEP
1536:1rAPCwQdxH4FYan9WGRdkBJQeGSZqpjVrs2ryrd1vUQuq6:hF6Fn9WwbSZqHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a448513336aeeff4557529fd6a263d9c_JaffaCakes118
Files
-
a448513336aeeff4557529fd6a263d9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
4476a3b14eeb074bdc8a446b54203b40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNumaAvailableMemory
BeginUpdateResourceA
lstrcmpW
LZOpenFileA
lstrcpyn
DecodePointer
BasepCheckWinSaferRestrictions
GetPrivateProfileIntA
GetComputerNameExA
MoveFileExA
Process32NextW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE