Static task
static1
Behavioral task
behavioral1
Sample
d22f59384f4b2f852ecfa6cdd4d151d9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d22f59384f4b2f852ecfa6cdd4d151d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d22f59384f4b2f852ecfa6cdd4d151d9_JaffaCakes118
-
Size
563KB
-
MD5
d22f59384f4b2f852ecfa6cdd4d151d9
-
SHA1
18c00e031377d63e350df37a4660fe2337f8ea85
-
SHA256
e4f86dd04670c5bbf20f1fb9eb7fe218ad4aa0acaaa73f47e5615de4eb7ab814
-
SHA512
7dcfd6dcf81bde7813a060d6bbf4658d07fb376177cfeb1f8d6e152715102543487103d423fc4c9e6f9a3f72a1634a80e5e60e734f23094eca474407ad9b03d2
-
SSDEEP
12288:aNIl9IURJ6+DiSZEPq2JQ6ybK1xNkNc8CZdFq05lnI2tpfpLzBEj:QIl9IURs++SZEPHJQLK1AS8WdoolDtB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d22f59384f4b2f852ecfa6cdd4d151d9_JaffaCakes118
Files
-
d22f59384f4b2f852ecfa6cdd4d151d9_JaffaCakes118.exe windows:5 windows x86 arch:x86
bcb64c257e93af2a35c9b0fc19e1f08b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memset
_except_handler3
memcpy
kernel32
GetModuleHandleA
CreateThread
LoadLibraryA
VirtualAlloc
GetProcAddress
VirtualFree
WaitForSingleObject
GetStartupInfoA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 547KB - Virtual size: 547KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ