Static task
static1
Behavioral task
behavioral1
Sample
069f4f55f2d7be39d2baae182f612935_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
069f4f55f2d7be39d2baae182f612935_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
069f4f55f2d7be39d2baae182f612935_JaffaCakes118
-
Size
21KB
-
MD5
069f4f55f2d7be39d2baae182f612935
-
SHA1
02484a3ebe08cf53015196c0ecc94cd000b606af
-
SHA256
a1d61a82f594ca92f2331a8ace36826d553951e86f15d6abe64c4e30b548b52b
-
SHA512
7b4ffe6e290242d06870fee091d95c3ef23af5331f8f62fe1c992e88db7abf98b1dcd053d07b050898f5ee5c88e15347c0aab6fcbec0d12012b9873adf49f9a1
-
SSDEEP
384:n83rhrTnnKEaXgMtU75RcMeQsyk3Mab9iWhumkskCZpsUYAkzUGKJ49okm7:nSrpLnWW7fc+kcab9c8pJkzU7c27
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 069f4f55f2d7be39d2baae182f612935_JaffaCakes118
Files
-
069f4f55f2d7be39d2baae182f612935_JaffaCakes118.exe windows:4 windows x86 arch:x86
99f5b0b723d6fca2813f516623081e1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA
user32
wsprintfA
MessageBoxA
Sections
.data Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 684B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ