Static task
static1
Behavioral task
behavioral1
Sample
0b58d212bdbe9db4679b564dc91b1efa_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0b58d212bdbe9db4679b564dc91b1efa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b58d212bdbe9db4679b564dc91b1efa_JaffaCakes118
-
Size
56KB
-
MD5
0b58d212bdbe9db4679b564dc91b1efa
-
SHA1
e1c180eafb88e7b45dca727291aabfe3640b60c5
-
SHA256
dec8eddfc661c861a7ae14adecf4cb0a710d1f12489689fe3a8db1bb8374acb9
-
SHA512
193429fc1f2fdbdb96f633af6856bae86462537a005e7378782c0778008d7745d3cdf7728eaf9275452aee91689b96fb2834b06e2ff60d8c1bf05ec9e4715712
-
SSDEEP
1536:VQgqEz7pp2RC95/YlLQkqmZvpOW5nFQlhle9yDt7hfuU60+a:VyEznEC7AFQkjivhhfuwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b58d212bdbe9db4679b564dc91b1efa_JaffaCakes118
Files
-
0b58d212bdbe9db4679b564dc91b1efa_JaffaCakes118.exe windows:1 windows x86 arch:x86
92009019dee90696f2364d47b68ae436
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessInternalW
CreateFileW
ExitProcess
GetFileSize
GetModuleFileNameW
GetThreadContext
GlobalAlloc
ReadFile
ResumeThread
VirtualAllocEx
ntdll
NtSetContextThread
NtWriteVirtualMemory
ZwUnmapViewOfSection
Sections
.text Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 42B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
.oidata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE