Static task
static1
Behavioral task
behavioral1
Sample
be74ee0580ee9769a4f3ff604574413d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
be74ee0580ee9769a4f3ff604574413d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be74ee0580ee9769a4f3ff604574413d_JaffaCakes118
-
Size
350KB
-
MD5
be74ee0580ee9769a4f3ff604574413d
-
SHA1
a9483bf2bde3ab8e2136f299f0d22b90346e2b5e
-
SHA256
aaeff9bdd1c159fc24a8d0bd34e277d820d21cfd4bbc159aabedbc5748605f51
-
SHA512
998c2d99dddb65346542aea3ad5b2de5d778c9768cae5e16013cff64f286fd47ae7658b6f02ffdb7dc033b78a73e6fefc9a0e17af98d77ef4bfbdc4049e14d16
-
SSDEEP
6144:4iTM+Zr0514G4jxtTTKnNuPeHNL6VSm916GvEZMTM8:4G/TjHT2nomHNLfY6GgC9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be74ee0580ee9769a4f3ff604574413d_JaffaCakes118
Files
-
be74ee0580ee9769a4f3ff604574413d_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE