Static task
static1
Behavioral task
behavioral1
Sample
d1f9a695ca095f06739c8cb9be2ff5eb_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d1f9a695ca095f06739c8cb9be2ff5eb_JaffaCakes118
-
Size
104KB
-
MD5
d1f9a695ca095f06739c8cb9be2ff5eb
-
SHA1
3a004c725bd68a88e63790b40ca9f04b8c2dca89
-
SHA256
689f96a9d652e74f960c590a8a1776c5cd7af5f4bab5a6c11231c8d39a337acb
-
SHA512
b910a181a2591f2afa6d914c346cc970b554e41a26972c80e27a61edffe8359df4e0af46735af62cdc13420d1c37201b552a1adda93f912ad0c268741580cf62
-
SSDEEP
3072:PIV+RlGM9K85rbyIxlPRBzgzXn/EU5jwaaHw7Koj4rHOF0:AkPGM8QyIxl3sRgOy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1f9a695ca095f06739c8cb9be2ff5eb_JaffaCakes118
Files
-
d1f9a695ca095f06739c8cb9be2ff5eb_JaffaCakes118.exe windows:65535 windows x86 arch:x86
20aa349fc8204fd1ba96f9166642e4c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetTimeFormatA
msvcrt
_initterm
_adjust_fdiv
__setusermatherr
__p__commode
__p__fmode
_except_handler3
__set_app_type
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsr1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE