Static task
static1
Behavioral task
behavioral1
Sample
0092d9aa5d5bf9e2bf92eb91df868e79_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0092d9aa5d5bf9e2bf92eb91df868e79_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0092d9aa5d5bf9e2bf92eb91df868e79_JaffaCakes118
-
Size
23KB
-
MD5
0092d9aa5d5bf9e2bf92eb91df868e79
-
SHA1
0a96e9a46224e9b43974b527cfca8b735f8e9bd9
-
SHA256
5687002716cc3723275b0ab5aebd2e7c9f3e08d8262ec00432b1f61fb83fbaf5
-
SHA512
7d1eb2d17cbed4fa638b2e8c2e2ad53271aed86e395f352f46c44e6e7e736caaeeeefb98580323f2d78012d43e3499c38bb8fd7d168fbfad413bbc113cd00458
-
SSDEEP
192:/G20tY3jJsGKQW2MSOwcsNR3qapfKX5gXYK/WfkbmWSrsBY3cSFJrWPhDxLxqD:+2x9sGrVarX5g2KmgYsSFp4Vjq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0092d9aa5d5bf9e2bf92eb91df868e79_JaffaCakes118
Files
-
0092d9aa5d5bf9e2bf92eb91df868e79_JaffaCakes118.exe windows:4 windows x86 arch:x86
da901dc7b7ec2ca0b37335b0265f5cd3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord858
ord846
ord849
ord845
ord841
ord864
ord415
ord375
ord248
ord765
ord419
ord793
ord553
ord513
ord822
ord509
ord511
ord512
ord795
ord377
ord722
ord443
ord312
ord318
ord406
ord364
ord305
ord811
ord842
ord844
ord397
ord441
ord329
ord476
ord784
ord346
ord657
ord395
ord304
ord362
user32
ord579
ord569
ord321
ord147
ord473
ord183
ord406
ord536
ord254
ord439
ord212
ord237
ord249
ord187
ord498
ord12
ord341
ord185
ord251
gdi32
ord170
ord176
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ