Static task
static1
Behavioral task
behavioral1
Sample
d0d07088a4d1537d72ea4a7e83f0ea70_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d0d07088a4d1537d72ea4a7e83f0ea70_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0d07088a4d1537d72ea4a7e83f0ea70_JaffaCakes118
-
Size
55KB
-
MD5
d0d07088a4d1537d72ea4a7e83f0ea70
-
SHA1
b6269f8faeb3816373fdaab053749ce392c183d5
-
SHA256
a551d311723fa37dc0a9205246e5d44dfe05c21930f6c369e7b66a8ca98975c4
-
SHA512
1247df1f44319cc972ef0b4d2bba1d4936536164a667f09c050aa0c61cdf5e6b9cf39983d934662f52e07f81644d8131ce2cd286d53aad54a5e9145c5f7f5884
-
SSDEEP
768:+ialpoBTUJvTwKkEHTwtE79LWV8KiU5+NfJJ9Q/DrpLYTKYa9XX+VIVl:QlATwvTwmZqeKigSlQbhaKX9XX+VM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0d07088a4d1537d72ea4a7e83f0ea70_JaffaCakes118
Files
-
d0d07088a4d1537d72ea4a7e83f0ea70_JaffaCakes118.exe windows:4 windows x86 arch:x86
fce7809a30096dee5d325be7178490ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetThreadContext
GetTickCount
LoadResource
LockResource
ReadProcessMemory
ResumeThread
SetThreadContext
SizeofResource
Sleep
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ