Static task
static1
Behavioral task
behavioral1
Sample
f977352e82e59ebb637458972c25adac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f977352e82e59ebb637458972c25adac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f977352e82e59ebb637458972c25adac_JaffaCakes118
-
Size
22KB
-
MD5
f977352e82e59ebb637458972c25adac
-
SHA1
42d3d66c28dbcf66a071ec2fbbc911b03977c342
-
SHA256
440cd7b57d434c01922462c49930acfaf48e3e7c3077cd56d6082d1b85d1952d
-
SHA512
30bae5e83e5a46a49f1d201ec1478b3aa0b1032f8579dcecfada0e22feea2f190c07d62c0c5d5e3aa6bc405733b646c349757ff9b984f450c62890e5f3bb7d0d
-
SSDEEP
384:M5YnZb0tn2c5iaTvvg86UDi27h0Bo9pKd/klu0YG0ZYu7AIenwebI1ILA7TnP:/u5nhbi290Bo6Jw5d8Y1Dk1I8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f977352e82e59ebb637458972c25adac_JaffaCakes118
Files
-
f977352e82e59ebb637458972c25adac_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0b12ce857fbdf9183f9b1de2e903f36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProcessMemory
GetProcAddress
LoadLibraryA
VirtualProtectEx
CreateProcessA
GetCommandLineA
SetThreadContext
GetThreadContext
ResumeThread
user32
GetDC
gdi32
SetTextColor
GetTextColor
Sections
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE