Static task
static1
Behavioral task
behavioral1
Sample
a13ebb3d4ae88f7c4ab91d70a86f1f25_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a13ebb3d4ae88f7c4ab91d70a86f1f25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a13ebb3d4ae88f7c4ab91d70a86f1f25_JaffaCakes118
-
Size
76KB
-
MD5
a13ebb3d4ae88f7c4ab91d70a86f1f25
-
SHA1
dd4316abb2347499c8461b345102b5edd231dd82
-
SHA256
770a1b4ac4bd67819303b70fb0a97d65cdac92f5ae5521b82d6bf464df4d6ba5
-
SHA512
40f270892d91e3200490bf9f9765b41d45cb28cb8f4c6a620afc9de6d8b8b44f74f60cab43e38199b0b6182ece8a2cccdc9974158c0763fd459d5a818a8083af
-
SSDEEP
1536:hRs+OYzXoMLHf6LrqulB3KeH5NGahPjO9mRK+TTGjEErxTWDTMqhGKYIZTET8x:LstkXHziLrqul9Kq5N1i9mRK+ejBkMqR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a13ebb3d4ae88f7c4ab91d70a86f1f25_JaffaCakes118
Files
-
a13ebb3d4ae88f7c4ab91d70a86f1f25_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b02c93e9e18ec8b1d4b1c5a610d55dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateHardLinkA
GlobalGetAtomNameA
ReplaceFileA
GetNumaAvailableMemory
CreateMailslotW
ActivateActCtx
GlobalUnWire
lstrcmpA
FileTimeToLocalFileTime
EnumSystemLanguageGroupsW
TlsSetValue
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE