Static task
static1
Behavioral task
behavioral1
Sample
da2166ce769f9888c3b97f2c24ea8d97_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da2166ce769f9888c3b97f2c24ea8d97_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da2166ce769f9888c3b97f2c24ea8d97_JaffaCakes118
-
Size
16KB
-
MD5
da2166ce769f9888c3b97f2c24ea8d97
-
SHA1
cf5271af126eace6dd8304d26fcacb1f22301488
-
SHA256
34f28c9e9fcfccd2140924692954523e0bcc3f38e3a170b5a851ed5c19bdc350
-
SHA512
1a3dc6b1e9b6f8cd22171c315ed940e6442a16a2815b5a57742d679611e20ea8dfbab7a3df56d06b6b27e577c79124ea31a3f90b221e23470be18e89df97ad12
-
SSDEEP
192:+uUDB4r380fCRcI5KW1eUJ2JpWr+MBYJvfAAJDak0XLRgqhyL5nHQT0X1jMj1:+CbRfCp/EU7rQxv90XLp0lnHQTixMj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da2166ce769f9888c3b97f2c24ea8d97_JaffaCakes118
Files
-
da2166ce769f9888c3b97f2c24ea8d97_JaffaCakes118.exe windows:4 windows x86 arch:x86
06ac5006571f45f4fe48af3b0111b8bf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcitmhk Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE