Static task
static1
Behavioral task
behavioral1
Sample
06885ede47172503af63dc4d24413914_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
06885ede47172503af63dc4d24413914_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06885ede47172503af63dc4d24413914_JaffaCakes118
-
Size
1.4MB
-
MD5
06885ede47172503af63dc4d24413914
-
SHA1
e79ec65d9ed8d4d1ca0d13b83af2009581f07356
-
SHA256
b99298845b52e833fabd4fda03f70d3c105957bc91db3f3aa8c0a8d9ecd21593
-
SHA512
daec8bde736c4d5d62a42f149502ff3a3200a2880dcbeb333dc454137734b6d0e34c3945d201d77aac27f35e025698d5386d365cf22cf471acf592ccbf143bc1
-
SSDEEP
24576:3+s+Ansyi1E3WHAriVQsYxeK1ijaKpW7EqPxuPuK8oGKn5:OWn/YEmg+ilw7fWjPxuUfKn5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06885ede47172503af63dc4d24413914_JaffaCakes118
Files
-
06885ede47172503af63dc4d24413914_JaffaCakes118.exe windows:4 windows x86 arch:x86
c82a32829cc7638627b8ab98cb0323de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrA
GetStringTypeExA
GetFileAttributesExA
RemoveDirectoryA
GetSystemDirectoryA
GlobalFindAtomA
OpenJobObjectA
ExpandEnvironmentStringsA
LoadLibraryExA
GetConsoleCommandHistoryLengthA
ClearCommBreak
GetComputerNameExA
GetTickCount
SetComputerNameA
GetModuleFileNameA
FreeLibrary
GetThreadContext
GetSystemInfo
VirtualAlloc
EndUpdateResourceA
GetSystemDirectoryA
d3d9
Direct3DCreate9
advapi32
CredFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 835KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ