Static task
static1
Behavioral task
behavioral1
Sample
ff2c18e19f3c3143c295129d1d15becb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff2c18e19f3c3143c295129d1d15becb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff2c18e19f3c3143c295129d1d15becb_JaffaCakes118
-
Size
98KB
-
MD5
ff2c18e19f3c3143c295129d1d15becb
-
SHA1
3ce64edbd25d9623540a0932a4f8b24295947c23
-
SHA256
a4593b1b7913a0f17c920eb2003c2e9cc71f4a11d88985e56250f39538b5288f
-
SHA512
cbbc4898d10666340c29b98c0164b06fffd443fe619aab4001ece711901fb4d18516b9cef04a0327418b104ae988d884f9bc56ad9373b51f5588fc0563f14b4d
-
SSDEEP
1536:vx7b4IxuhvMGntwjskfIRJgqxbLo7GQDV/+E9E5WBz7t07yyf4kFRj68R:J7bEhvMRwkwRqqxbiDYUZBz7tDoRbjf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff2c18e19f3c3143c295129d1d15becb_JaffaCakes118
Files
-
ff2c18e19f3c3143c295129d1d15becb_JaffaCakes118.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE