Static task
static1
Behavioral task
behavioral1
Sample
001023cfee5e4827c237846763416fed_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
001023cfee5e4827c237846763416fed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
001023cfee5e4827c237846763416fed_JaffaCakes118
-
Size
22KB
-
MD5
001023cfee5e4827c237846763416fed
-
SHA1
d99ba23dbea709978658cfda455455ac4f0894de
-
SHA256
8838cf9faa22d8d6cbac7ca993480950347a1f487850d73de818b8e96a15113c
-
SHA512
1ce67b453e04395164e31080d4e5879a1190d561c53455736ec9fdff661361b4f6680decedf14387bfb0d22e72b469cb1342a672ddbfc1950d370adac85a8950
-
SSDEEP
384:9FAacodxKFtYw9UcN+s3mwZ+gnBMTa8xK2AfugwdKWwnbtjHihzxXtPpqw:nAtaKFtYsU2+s3mwZ+I4KenKLibXt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 001023cfee5e4827c237846763416fed_JaffaCakes118
Files
-
001023cfee5e4827c237846763416fed_JaffaCakes118.exe windows:4 windows x86 arch:x86
9df64d939e018ea9adbbed37fc293a17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
SetThreadContext
VirtualProtectEx
VirtualAllocEx
GetThreadContext
CreateProcessA
GetProcAddress
LoadLibraryA
FoldStringA
Sections
.data Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE