Static task
static1
Behavioral task
behavioral1
Sample
d0c6d227006fcef04b4744bed57f3219_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0c6d227006fcef04b4744bed57f3219_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0c6d227006fcef04b4744bed57f3219_JaffaCakes118
-
Size
9KB
-
MD5
d0c6d227006fcef04b4744bed57f3219
-
SHA1
93ad9971a2bbb7ebda908cf70688db8200d5df10
-
SHA256
a00a5b5d6c41b1234d26a506536bf4565d45076b1e63fd3cb1fc7846c62ed84b
-
SHA512
82e2cb6e836a14ff6c2fd3737f23d42143279af8f4d97704c22935b38b9e43a531d5be73f50b3039be2ab62e9aad8b06a270f79c3314318af05cfc37b9de92cb
-
SSDEEP
192:9n9jpZ11VDPq8mtrem1eC7e9ovEHJfP1t3Xnd7Vp24z:9nln1Tm/em1ewe9ovifPPlVh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0c6d227006fcef04b4744bed57f3219_JaffaCakes118
Files
-
d0c6d227006fcef04b4744bed57f3219_JaffaCakes118.exe windows:4 windows x86 arch:x86
9eeefa7f6cdca34a42a6c3913e8fb403
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineW
GetTempFileNameW
FreeResource
FindResourceW
LoadResource
CreateProcessW
WaitForSingleObject
GetModuleHandleW
GetTickCount
WriteFile
SizeofResource
GetFileAttributesW
GetModuleFileNameW
CreateFileW
lstrlenW
GetTempPathW
LockResource
lstrcatW
CloseHandle
shell32
SHFileOperationW
shlwapi
StrChrW
StrRChrW
msvcrt
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
memmove
memset
Sections
pe Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ