Static task
static1
Behavioral task
behavioral1
Sample
b15b4587a65d3b45659a591efe0cfa35_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b15b4587a65d3b45659a591efe0cfa35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b15b4587a65d3b45659a591efe0cfa35_JaffaCakes118
-
Size
179KB
-
MD5
b15b4587a65d3b45659a591efe0cfa35
-
SHA1
86d189e3b10dff7d15c3e1f27466af02fd2d4957
-
SHA256
2456bde175dbe864974b4459d59298d6638da7273f64fa4ac8fe220a870985e0
-
SHA512
c3b29c3b2e7cb5d7fe56e71b3fa2b044ef9a15c558672a05e5557f0fab805e6960b9fdeb46aad22d96ccdedf0c5476a8c7ef64ef249afa8cf3a45b57136f5356
-
SSDEEP
3072:94rm9PVcuMR+kFAuy0HMlS3kkuVNujrj9Fc6XALvppCOyso3rnEiBE8lRCx:94rmEuS+kFAuBMl5kuNuRALc/3rnDux
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b15b4587a65d3b45659a591efe0cfa35_JaffaCakes118
Files
-
b15b4587a65d3b45659a591efe0cfa35_JaffaCakes118.exe windows:4 windows x86 arch:x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 44KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE