Static task
static1
Behavioral task
behavioral1
Sample
0646f791a671753b46e9b7dd07f9b6d7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0646f791a671753b46e9b7dd07f9b6d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0646f791a671753b46e9b7dd07f9b6d7_JaffaCakes118
-
Size
7KB
-
MD5
0646f791a671753b46e9b7dd07f9b6d7
-
SHA1
03ff06f172fb36b3c1d7bcaa69ac150066e01a17
-
SHA256
e95d320cec6e9dc47a5034430531caa70a6dc2912f2d27df7b7167e438cfc280
-
SHA512
839adac3535d6757749ecd2f9f56ac3056d133746ccb3b67f954ba4be6f9ba7262af5eb0aa77afa794603a26911625fd7ab400cca67e923f538841c508734a1a
-
SSDEEP
192:PBhhHcs8wBo1GPqig2oEoifWXPcg/qjy5SnD:n2s8wnii7oifBg/qjWgD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0646f791a671753b46e9b7dd07f9b6d7_JaffaCakes118
Files
-
0646f791a671753b46e9b7dd07f9b6d7_JaffaCakes118.exe windows:1 windows x86 arch:x86
3e1180b6a8bd4d1be1c25737b1549b8d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetModuleFileNameA
CreateProcessA
CreateFileA
GetFileSize
ReadFile
VirtualAllocEX
WriteProcessMemory
GetThreadConteXt
SetThreadConteXt
ResumeThread
CloseHandle
LocalFree
EXitProcess
ntdll
ZwUnmapViewOfSection
Sections
.e1n Size: 859B - Virtual size: 860B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE