Static task
static1
Behavioral task
behavioral1
Sample
b053f1990b98850285f84be207a3bee8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b053f1990b98850285f84be207a3bee8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b053f1990b98850285f84be207a3bee8_JaffaCakes118
-
Size
112KB
-
MD5
b053f1990b98850285f84be207a3bee8
-
SHA1
69181237c346e1f155bd59ab3afbd33600198e55
-
SHA256
86ef568c226c79b376ff1ecb4784233cadbc773cfe752b2134c548286caaa799
-
SHA512
738498c7a7822f03eec7e3f0a47f872f44ce28aa86d92068948bb524535bd2f920551275fc80ce8d635d561cab88da0e05703cf997b507a8cd7c37d8388ffa84
-
SSDEEP
768:XO7zfsJUingQ9Y4UM9v6CT5TRdFZrpE0qA6qAVieYYEksYaU55cKdD:XO7wJTourJjMNkHYdsYR3d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b053f1990b98850285f84be207a3bee8_JaffaCakes118
Files
-
b053f1990b98850285f84be207a3bee8_JaffaCakes118.exe windows:1 windows x86 arch:x86
93a201389cf20e53d1b53c08bc705909
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
VirtualFree
LocalAlloc
GetStartupInfoW
HeapFree
WideCharToMultiByte
VirtualAlloc
GetCurrentProcessId
GetModuleHandleW
SetLastError
QueryPerformanceCounter
lstrlenW
LeaveCriticalSection
HeapReAlloc
GetModuleFileNameA
lstrlenW
lstrcpyW
HeapReAlloc
CreateThread
GetStartupInfoW
GetStartupInfoA
MultiByteToWideChar
GetCurrentProcess
GetSystemTimeAsFileTime
LocalFree
Sections
.vcvv Size: 102KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mgbx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dwte Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ahax Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pmhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stqn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cgqm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.umkx Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.utjh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE