Static task
static1
Behavioral task
behavioral1
Sample
f55b3c46626c45ee4200752f40f32a86_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f55b3c46626c45ee4200752f40f32a86_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f55b3c46626c45ee4200752f40f32a86_JaffaCakes118
-
Size
62KB
-
MD5
f55b3c46626c45ee4200752f40f32a86
-
SHA1
05c38e9a31217dea87a245e4228177f57d90a57f
-
SHA256
6671b30089087de6b6770d1e139d34155cb5bcd3d041bec620b02fabc9c4e0ff
-
SHA512
8d1a3ccbf0d64663d276ec2a02508bda33e5dbc20a1924819ffb9a1ff7036f93b6c3a0cd9b4fdd412bb2fbf6f03c6e556ac16d40738530dbaafc8b05fe47475e
-
SSDEEP
768:EBKCzjZm+oKJk1rbn+Jyjw0Dl0GaXGd1avMq/6ELg/3C:EBH3sdn7j5tasmD3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f55b3c46626c45ee4200752f40f32a86_JaffaCakes118
Files
-
f55b3c46626c45ee4200752f40f32a86_JaffaCakes118.exe windows:4 windows x86 arch:x86
4143210abce1dea1d825feb54303a17c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DosDateTimeToFileTime
FileTimeToDosDateTime
GetFileAttributesA
GetCurrentProcess
GetCurrentDirectoryW
GetSystemInfo
GetACP
InitializeCriticalSection
CreateEventA
GetLastError
CreateMutexA
WaitForSingleObject
SetEvent
GetTickCount
FreeLibrary
GetVersionExA
MultiByteToWideChar
GetProcessHeap
GetProcAddress
softpub
OfficeCleanupPolicy
DllUnregisterServer
GenericChainFinalProv
dpnaddr
DirectPlay8AddressCreate
Sections
.icode Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aH Size: 5KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ZAEV Size: 512B - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bzhlST Size: 4KB - Virtual size: 817KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wa Size: 5KB - Virtual size: 897KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 9KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Q Size: 5KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ