Static task
static1
Behavioral task
behavioral1
Sample
b7ee47a63bb86d0b0522e8ffb3a184a9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7ee47a63bb86d0b0522e8ffb3a184a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7ee47a63bb86d0b0522e8ffb3a184a9_JaffaCakes118
-
Size
92KB
-
MD5
b7ee47a63bb86d0b0522e8ffb3a184a9
-
SHA1
c554b193f5f0e7c995da1bac6b2a43c2376b7f60
-
SHA256
1caa05c2c1581dfa1d0ce0ee74233fdc74462549a8f85e3f5cbcbe0a67e0c489
-
SHA512
ce5be97126b6001a7a3ffe2a7d7546647a25ce30f4e7611d419c1c209a45dfaef7bb10d14e5c9af8105c62d4fe650031f14042b99aef04205024ca879af50616
-
SSDEEP
1536:CBTgOFuCnw6wtyIlvyiLCausV90MmcUKkcYFP4OC3t+dYC7znooSYho2YbTZetKv:AchCkyhax9YcUKcPLC3CY2no6xEVetKv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7ee47a63bb86d0b0522e8ffb3a184a9_JaffaCakes118
Files
-
b7ee47a63bb86d0b0522e8ffb3a184a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
8116ac6f3333fd4eda2569085a1979e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
ExitWindowsEx
advapi32
LookupPrivilegeValueA
shell32
ShellExecuteA
imagehlp
CheckSumMappedFile
Sections
.text Size: 87KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE