Static task
static1
Behavioral task
behavioral1
Sample
0646241d0d095fcaaff50dabe018b68d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0646241d0d095fcaaff50dabe018b68d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0646241d0d095fcaaff50dabe018b68d_JaffaCakes118
-
Size
65KB
-
MD5
0646241d0d095fcaaff50dabe018b68d
-
SHA1
32f8b0753a68346b98ec8c741f7cba67dad6a6a4
-
SHA256
6318a669da0783052856f044bd7ff2208c08b2122304d072812f8c0b5c25f11c
-
SHA512
4e49acc4a7a34fccb9f32aeb8b8b9e46ff5ab98d6ee42b5f4ad3144783a12e02d2a52e2487546c18eb5b6343d4d49fde37d2fccb819d4dbb3ff1a0d86cea46fd
-
SSDEEP
768:5ODvJDIXFixmY+8c9nmnKr5RPaLrcgiOgMJwQOp6rLEwp6X:wDvqFixvcAeP2cnOgoG8rww8X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0646241d0d095fcaaff50dabe018b68d_JaffaCakes118
Files
-
0646241d0d095fcaaff50dabe018b68d_JaffaCakes118.exe windows:4 windows x86 arch:x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
******* Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
******* Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE