Static task
static1
Behavioral task
behavioral1
Sample
a79e0cb272e83b13241c0081f88f42df_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a79e0cb272e83b13241c0081f88f42df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a79e0cb272e83b13241c0081f88f42df_JaffaCakes118
-
Size
22KB
-
MD5
a79e0cb272e83b13241c0081f88f42df
-
SHA1
36be70a34a4afdb07acf08529f623f0cf5a69180
-
SHA256
ad36dc6b21c4af081d12c1eb7d03aaf1eb3e1f2729e30000f98f42ad4d956da3
-
SHA512
7afa62e61a0f109bd7b5da3f2d4c7585ef4458ede7520e6948e6918b392f7e058e2dec5cba4376392b9710a6f4a73ead624e3fcf557cd1a616667aa91cc81686
-
SSDEEP
384:aw/GfsC5XbJAR2wV7FiK6SH9hH0pdlrVpyEXthXFIxkGjObRMvSa0bx:Z/GfZ5rJAliKlHjH0p/VlXv8kGjEMw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a79e0cb272e83b13241c0081f88f42df_JaffaCakes118
Files
-
a79e0cb272e83b13241c0081f88f42df_JaffaCakes118.exe windows:4 windows x86 arch:x86
53cef251bfddee10e487513a02a1e1c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
VirtualAllocEx
GetThreadContext
CreateProcessA
SetThreadContext
GetProcAddress
LoadLibraryA
FoldStringA
GetCommandLineA
ResumeThread
gdi32
GetTextColor
Sections
.data Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE