Static task
static1
Behavioral task
behavioral1
Sample
dfecf23454560d717741e585921807ee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfecf23454560d717741e585921807ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfecf23454560d717741e585921807ee_JaffaCakes118
-
Size
31KB
-
MD5
dfecf23454560d717741e585921807ee
-
SHA1
9899a2a9a8ff119797d5413e543d8a8483051e13
-
SHA256
e553db0caf33601cf320de8a799d88325d72ce0da7fe82ee13dbd9ac31ee3e61
-
SHA512
6ba3279c2a588a35064c369120e95d2916f69d867b9ea0efffbfcb009ab5e27401b62ce825765b776a9e6c6db229d550062ad1a212a80be72916339a36237ff3
-
SSDEEP
384:OKCAZ5Vcd5FJ7OgqHQIyCFmCle8+Ia88Ayg46lEfyRDEnNsyMO5eKPJakzX2a:fR5u9fqHQILmCw8GLlSnEnNsETPvzX2a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfecf23454560d717741e585921807ee_JaffaCakes118
Files
-
dfecf23454560d717741e585921807ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
3650e4296df43a9ef8ebc1ca334696f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvcrt
_mbsnbcmp
shell32
SHGetSpecialFolderLocation
advapi32
SetSecurityDescriptorDacl
ws2_32
send
user32
MessageBoxA
Sections
pec1 Size: 12KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: 3KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE