Static task
static1
Behavioral task
behavioral1
Sample
cf507122e092ce507056481799423286_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf507122e092ce507056481799423286_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf507122e092ce507056481799423286_JaffaCakes118
-
Size
83KB
-
MD5
cf507122e092ce507056481799423286
-
SHA1
bad00677825fcd2f3dec255eda8174f393edf593
-
SHA256
6effa42b64e72c4e709e7ae1d3a1b98b97f7586f9299b2b94c9fc3cf6a431b54
-
SHA512
2b4c81c2864cfd5c185c0fa68ccd651539ebc961493da7593e66368b39249f77c44c7da48e879de4e9f5eaa1c0f18bffe14773731664835f110f2239678260a6
-
SSDEEP
1536:klR8mMHFZEOYGHQpxKMnxXKRmqlwMeHeXTYZ:klR8mMlZZcKcql4+8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf507122e092ce507056481799423286_JaffaCakes118
Files
-
cf507122e092ce507056481799423286_JaffaCakes118.exe windows:4 windows x86 arch:x86
b0fd4ae3d577eb5fad4298f91b2ca257
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetComputerNameA
GetCurrentDirectoryA
CreateEventA
GetSystemDirectoryA
GetStdHandle
GetCurrentProcessId
GetCurrentThread
ExitProcess
SleepEx
VirtualAlloc
GetCurrentThreadId
GetWindowsDirectoryA
LocalAlloc
LocalFree
GetCurrentProcess
advapi32
GetUserNameA
user32
GetForegroundWindow
GetActiveWindow
GetSystemMetrics
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ