Static task
static1
Behavioral task
behavioral1
Sample
a53c292d2f7809b48b9df945ce64ebaa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a53c292d2f7809b48b9df945ce64ebaa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a53c292d2f7809b48b9df945ce64ebaa_JaffaCakes118
-
Size
277KB
-
MD5
a53c292d2f7809b48b9df945ce64ebaa
-
SHA1
c1d123d3b09a4a180a6dc556002d4729c323b142
-
SHA256
9ec53dac092470200d3f776fe6b4afa17c887056a7845f1bf57e8e71d9af43f0
-
SHA512
28bf6316dbd9f5e47af9fbb264e1bf543b149fcbebf7d2386a1e9cef303afd0173e5e3805ddf6c279cf8fe81532011e8faab87286eddfa88c8fd1a3300efe919
-
SSDEEP
6144:g2iW7e70fc6sT1Q2H3VUGpFNevhaWwdUcokurtVItT:g2iWbfcs2XzpDxFokupO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a53c292d2f7809b48b9df945ce64ebaa_JaffaCakes118
Files
-
a53c292d2f7809b48b9df945ce64ebaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
e37a7031016d79f00f161c3116c969e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
BaseFlushAppcompatCache
SetLastError
GetSystemInfo
TlsFree
InterlockedExchange
VirtualFree
HeapCreate
EnumResourceTypesW
IsBadWritePtr
HeapDestroy
CreateMailslotA
GetSystemTimeAsFileTime
VirtualQuery
GetACP
SetEndOfFile
VirtualAlloc
GetLocaleInfoA
oleacc
AccessibleChildren
CreateStdAccessibleProxyW
newdev
UpdateDriverForPlugAndPlayDevicesA
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ