Static task
static1
Behavioral task
behavioral1
Sample
ce9a7c79e49233e3dd64ac4598d63f1d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce9a7c79e49233e3dd64ac4598d63f1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce9a7c79e49233e3dd64ac4598d63f1d_JaffaCakes118
-
Size
393KB
-
MD5
ce9a7c79e49233e3dd64ac4598d63f1d
-
SHA1
8341e015f851c16270a76a9eb8120b91c99362ac
-
SHA256
aaef6511204ef1b7c2849c51563399589b0ea30bbc541453485454529c38fa52
-
SHA512
9a3146297c40d26d63b64c75a7d94d67088a736c68eebeaf12204aa5187e2a4fe3fda98f7b8338e1fbfee41912634befb1e124c9f4a44662a5e14f36b5565f2f
-
SSDEEP
12288:LrnmuRGEViree+M4SqrgNJMXEW9KIohp0iVyRoHj46LlTOx3KuVQQU11FaC2m/WG:HhYfqFGv7An9CNhUP+cye2vykd49XzM9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce9a7c79e49233e3dd64ac4598d63f1d_JaffaCakes118
Files
-
ce9a7c79e49233e3dd64ac4598d63f1d_JaffaCakes118.exe windows:1 windows x86 arch:x86
3e1180b6a8bd4d1be1c25737b1549b8d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetModuleFileNameA
CreateProcessA
CreateFileA
GetFileSize
ReadFile
VirtualAllocEx
WriteProcessMemory
GetThreadContext
SetThreadContext
ResumeThread
CloseHandle
LocalFree
ExitProcess
ntdll
ZwUnmapViewOfSection
Sections
.e0n Size: 859B - Virtual size: 860B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE