Static task
static1
Behavioral task
behavioral1
Sample
cdeb13fb8991404226e2d6034fb06a19_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cdeb13fb8991404226e2d6034fb06a19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cdeb13fb8991404226e2d6034fb06a19_JaffaCakes118
-
Size
27KB
-
MD5
cdeb13fb8991404226e2d6034fb06a19
-
SHA1
2b0a698712af648680f3b67d5197a26c4252530d
-
SHA256
40e9e59b074b0f519677ee1755f63ffab26695b959a5099a9b1d5f5c28174db9
-
SHA512
966c6592d0a6c3dfa0f4f183eb992bfc551de1b383a9544c60e4d0f3236c0f5f1673419f5db67f2ffba2e2804a1a7a4ed02e2b9985af20dc9de0ed7ed177b22b
-
SSDEEP
384:rARMBOFJrwxYooDeke0N85EYbMPZTUEqgJH3eJoD9SVf9XVWHQu:r0MBOzUoDek7jNTUNgJH3eJoD941
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdeb13fb8991404226e2d6034fb06a19_JaffaCakes118
Files
-
cdeb13fb8991404226e2d6034fb06a19_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbf47572e8cb446c01bd5522c7d7f827
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion
user32
MessageBoxA
Sections
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.res Size: 20KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE