Static task
static1
Behavioral task
behavioral1
Sample
b6ede2f1a41795839a988fe3ab356e25_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b6ede2f1a41795839a988fe3ab356e25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6ede2f1a41795839a988fe3ab356e25_JaffaCakes118
-
Size
175KB
-
MD5
b6ede2f1a41795839a988fe3ab356e25
-
SHA1
399f08edc5380df031cf87fd43590b90db5ec29b
-
SHA256
4828032ef46ef36364b5fb7e57c9767f9be306d9221f0d8423051892c7c074dd
-
SHA512
9d75f66112d3e1113cefd809f956be7a1421f69b732d29607b8753d073d3235248704fcf9a5c4cb4b54604dd64fd3d0ce6ca2a82eace9497726449642c592db0
-
SSDEEP
3072:Q39tV1nkkARK3ZZ70Ny/p/HDEgI2Wq8bcstBJ0hjKz9Z7RKiXz90LfiMN/JM:ytDGR4ZxtpfDLIO6j8UFKUieMNq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6ede2f1a41795839a988fe3ab356e25_JaffaCakes118
Files
-
b6ede2f1a41795839a988fe3ab356e25_JaffaCakes118.exe windows:4 windows x86 arch:x86
e00945f1f49e71d22946da8a292f5d98
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetPrivateProfileStringA
FlushInstructionCache
GetExitCodeProcess
SetFilePointer
GetProcAddress
FindNextFileA
FindClose
GetWindowsDirectoryA
DeleteFileA
MultiByteToWideChar
GetModuleHandleA
EnumResourceNamesW
WaitForSingleObject
SetupComm
WriteFile
FreeLibrary
LoadLibraryExA
GlobalAlloc
WritePrivateProfileStringA
MulDiv
FindFirstFileA
GlobalFree
rpcrt4
NdrComplexArrayFree
UuidCreate
shell32
SHFileOperationA
SHGetFileInfoA
ShellExecuteA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ