Static task
static1
Behavioral task
behavioral1
Sample
b22f25f2c9975d3a3ce6b7a602475cc8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b22f25f2c9975d3a3ce6b7a602475cc8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b22f25f2c9975d3a3ce6b7a602475cc8_JaffaCakes118
-
Size
22KB
-
MD5
b22f25f2c9975d3a3ce6b7a602475cc8
-
SHA1
5098d6806fe46a8ef5ea2c0b0e4e4f6eb30774ee
-
SHA256
7bd56ed49d147d53cc61e406f5d84bd824b97a554924df748244fe0011d187af
-
SHA512
139629d3ed189c6ca71430ef06a2f4048794de2395eae737cc75a12333c2dfed180fc6332c2f6861ed25345f7d3b6b6d5803e75c9da796088128dd812413eb40
-
SSDEEP
384:M5EnZr4ZftFN/ZdSevkOW4biHVPEDE+BCgMYIBN3lEG11xHIUQDMnP:HNCR/NklFEDEOCgQuGaz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b22f25f2c9975d3a3ce6b7a602475cc8_JaffaCakes118
Files
-
b22f25f2c9975d3a3ce6b7a602475cc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0b12ce857fbdf9183f9b1de2e903f36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProcessMemory
GetProcAddress
LoadLibraryA
VirtualProtectEx
CreateProcessA
GetCommandLineA
SetThreadContext
GetThreadContext
ResumeThread
user32
GetDC
gdi32
SetTextColor
GetTextColor
Sections
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE