Static task
static1
Behavioral task
behavioral1
Sample
05c67048a8617e8d0d382877bd4f181c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05c67048a8617e8d0d382877bd4f181c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05c67048a8617e8d0d382877bd4f181c_JaffaCakes118
-
Size
721KB
-
MD5
05c67048a8617e8d0d382877bd4f181c
-
SHA1
71393fc5396ea1a810e8e86c91d9c8c74e847c27
-
SHA256
6de1250a22772eb6417e3e896961a3cc6e227b5eb781172d61ca8145c4018b7a
-
SHA512
e77546270d970ff707f14c5f61c5bdb4aff48fa0f5f9c547f0a915f06ad6e482f61c2534ab23b70bdc7b8297eb9eff35768e192b30d8ca9c20e44e065ce5e63a
-
SSDEEP
12288:bh6j7JKxbpfP7MWp3s2n3jv9L8mHYX3CwvLa2fNc1iyYcByM9M72Lqc00:s/Ax9P7M239T1gBC8fN8YcBy/72+p0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05c67048a8617e8d0d382877bd4f181c_JaffaCakes118
Files
-
05c67048a8617e8d0d382877bd4f181c_JaffaCakes118.exe windows:5 windows x86 arch:x86
779b30db4ea6c9f92fafdf84f5581f5a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
shell32
SHGetSpecialFolderPathA
ole32
CoUninitialize
oleaut32
SysFreeString
Sections
.text Size: - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLD0 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLD1 Size: - Virtual size: 603KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLD2 Size: 703KB - Virtual size: 703KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ