Static task
static1
Behavioral task
behavioral1
Sample
b58b9b9ae7ee0a02be09b84fb2e4afc7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b58b9b9ae7ee0a02be09b84fb2e4afc7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b58b9b9ae7ee0a02be09b84fb2e4afc7_JaffaCakes118
-
Size
100KB
-
MD5
b58b9b9ae7ee0a02be09b84fb2e4afc7
-
SHA1
2923673fa6303fb2295a589a436cbb9104bc01dc
-
SHA256
a83ddf1aede417191736bf806598f28ec5866f14aa70d856e1ce42296faf8b28
-
SHA512
f7de79e56302fe4d9abd54f474840f43d3ca6eb9fb7bc7c03268e1cf52ec83fdd1f959578c419043e00a5629d96d412cc469ca50a90b44751bf6606bcc5da7bd
-
SSDEEP
3072:yKlLgYV2uIjWNOU0hV3K7HN0piy32RpB2YxtgoTGi:yKCYA4nhsUB2ugoT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b58b9b9ae7ee0a02be09b84fb2e4afc7_JaffaCakes118
Files
-
b58b9b9ae7ee0a02be09b84fb2e4afc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
7054eb1ac112f80558fbd850c2a374a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CharNextA
oleaut32
SysFreeString
advapi32
RegSetValueExA
shell32
ShellExecuteA
Sections
CODE Size: 94KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE