Static task
static1
Behavioral task
behavioral1
Sample
d673f3e22ff1d7722da7b370f2497584_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d673f3e22ff1d7722da7b370f2497584_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d673f3e22ff1d7722da7b370f2497584_JaffaCakes118
-
Size
45KB
-
MD5
d673f3e22ff1d7722da7b370f2497584
-
SHA1
3e2afd95ffef5f2e7c4f7c799add42593b59b19b
-
SHA256
9fabb6074823c8d3ad1e5d1bd6eea7700088fc153f206474367ec3e5bd0b781f
-
SHA512
c7d41640f67671d8965e3cf9de8388126d44b27e551858b5608e9e89083dcc8b15bdc413254863889f1dd7db9dc20e7c724013fb25c0195dec08a0f5564b1ddb
-
SSDEEP
768:4H+J3obXa52dmJkFv33cQUkg2CZltx1MVXc4XPgnMbS6l7GNww1oCo4vquG8:I+Obq52p3MQxg2CZTAMD6l7Bwu3uv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d673f3e22ff1d7722da7b370f2497584_JaffaCakes118
Files
-
d673f3e22ff1d7722da7b370f2497584_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f1a827dec3fbbed96b0855f2ccec630
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceA
DeleteFiber
GetProcAddress
GetModuleHandleA
Heap32Next
SetConsoleCP
VirtualProtect
VerifyVersionInfoA
VirtualFree
VirtualAlloc
WaitForMultipleObjects
ws2_32
connect
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
Sections
.code Size: - Virtual size: 140KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 44KB - Virtual size: 48KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE