Static task
static1
Behavioral task
behavioral1
Sample
c912386a6db084bfe3661c3ee062b258_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c912386a6db084bfe3661c3ee062b258_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c912386a6db084bfe3661c3ee062b258_JaffaCakes118
-
Size
44KB
-
MD5
c912386a6db084bfe3661c3ee062b258
-
SHA1
70f614c327766c6e2632585ea78b89132c80899d
-
SHA256
15848bcf5951ed103c62d19bdd7079c709033da3511d52c2eaad1412f530a5b2
-
SHA512
0a3e583cc3a5cc14ea67bdcc1ad5a4f87c045d023733b2e6ad20647a361910a773242aee7d3cbd05c239484e5d16b223222d386fcb10ea2af13562c4b3dfecea
-
SSDEEP
768:DNKu06B8t06waWwTGglhB6fY1nlcqCU9bE+yLR4PJXAd8TcuxUVK8lxnTpBQfCN4:D/8S6cOh1nlcqCU9bkLR4RO8T+Ko1N3o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c912386a6db084bfe3661c3ee062b258_JaffaCakes118
Files
-
c912386a6db084bfe3661c3ee062b258_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f1a827dec3fbbed96b0855f2ccec630
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceA
DeleteFiber
GetProcAddress
GetModuleHandleA
Heap32Next
SetConsoleCP
VirtualProtect
VerifyVersionInfoA
VirtualFree
VirtualAlloc
WaitForMultipleObjects
ws2_32
connect
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
Sections
.code Size: - Virtual size: 140KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 43KB - Virtual size: 44KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE