Static task
static1
Behavioral task
behavioral1
Sample
cee40707d57ba8a6a9dffe821cb13827_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cee40707d57ba8a6a9dffe821cb13827_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cee40707d57ba8a6a9dffe821cb13827_JaffaCakes118
-
Size
16KB
-
MD5
cee40707d57ba8a6a9dffe821cb13827
-
SHA1
d655127171acfb1a61baff2f506fa2375862664f
-
SHA256
3fee08a1bc445f5af27f6f8c4ade6846d42a41fa5ef602b4d8baff3b0e32fe1b
-
SHA512
abb2fa7539ba9a7edd512c788eeb4ef7565a6685ed6da602998fbb34c72e4e8189c6d2144c8a2a550cf7e382909251647fd6ac979f21aa4a3e1684c788c97ad9
-
SSDEEP
384:KcOVsQb+4eN67TErnutulVj8JhPOQUvHUFGF/h2pCB1eM4:KcysmeN67T2nutukmQo4GF/Upn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cee40707d57ba8a6a9dffe821cb13827_JaffaCakes118
Files
-
cee40707d57ba8a6a9dffe821cb13827_JaffaCakes118.exe windows:4 windows x86 arch:x86
f81d848523dbe04cd6b38f5eb7fbe44a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegOpenKeyExA
gdi32
MoveToEx
ole32
CoInitialize
oleaut32
SafeArrayCreate
psapi
EnumProcesses
Sections
.DCS0 Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DCS1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DCS2 Size: 523B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE