Static task
static1
Behavioral task
behavioral1
Sample
b9ce22ac4340b51f9b815a98dafdcedf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b9ce22ac4340b51f9b815a98dafdcedf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9ce22ac4340b51f9b815a98dafdcedf_JaffaCakes118
-
Size
11KB
-
MD5
b9ce22ac4340b51f9b815a98dafdcedf
-
SHA1
6fdbe9405c6511b5d9c791dd526da006b8ffa31d
-
SHA256
5fbf3e4c79165cd576c178ba492cc5af0be20dd92ab70c0515977822e4e185c8
-
SHA512
3ff024b8eabd1aa1732fd0152a2a0c6f694349707157c2718907a9e8bd2ac518fe9a139911a103954c65f5d3c2593416f0ee425ea5b4e561a754e4e97046daa9
-
SSDEEP
192:ebbtgQRFzMDp5DKeL2C+tkSj9aG8JtkSSysxjWzWvRuobmU+KoQTBK3iOk3gmDOK:egQRFgD/Xa1STJ/sxiyvRFbm+DTBzgfK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9ce22ac4340b51f9b815a98dafdcedf_JaffaCakes118
Files
-
b9ce22ac4340b51f9b815a98dafdcedf_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd227ba966c127e93fe82f25f211eaca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
user32
wsprintfA
MessageBoxA
Sections
.data Size: 5KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE