Static task
static1
Behavioral task
behavioral1
Sample
c21000134df04c571bd59dfeda6c7bc9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c21000134df04c571bd59dfeda6c7bc9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c21000134df04c571bd59dfeda6c7bc9_JaffaCakes118
-
Size
64KB
-
MD5
c21000134df04c571bd59dfeda6c7bc9
-
SHA1
89a550617449715b5dc0e31aa05ab28687d29e22
-
SHA256
936b5bf63eb87156d9c2c9f78d09e4fb9542ca169e83758b3c0c1227a77dda30
-
SHA512
1a0881ec94c3b10a316ef9318a6b46d05862f830bf97cab301a61a327b7f3da435e50634c12c6eb5d2aeecc65229014af11bbeb13d81df571845162d44a1760f
-
SSDEEP
1536:3NZHB5seNUhAZqLK4ZXJGtIWopVNZ1EFWVpl:3NZJ2HLBXotIL1mor
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c21000134df04c571bd59dfeda6c7bc9_JaffaCakes118
Files
-
c21000134df04c571bd59dfeda6c7bc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
99f5b0b723d6fca2813f516623081e1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA
user32
wsprintfA
MessageBoxA
Sections
.text Size: - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE