Static task
static1
Behavioral task
behavioral1
Sample
16840f664dd79d83b3bdc364d797acb3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
16840f664dd79d83b3bdc364d797acb3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16840f664dd79d83b3bdc364d797acb3_JaffaCakes118
-
Size
878KB
-
MD5
16840f664dd79d83b3bdc364d797acb3
-
SHA1
129cd677982719974c47796735ebf193984e2443
-
SHA256
c89b3f21d5ad9702b22deb5f79cc13b739b0b7050292b1aa945ec0d2d68fecd6
-
SHA512
3f3a7f72afa670e6841886597d7d6794f591917d8b1ace56b11e8bd3ebaa64c634f09b0ace219aa2285c8edfcba2aa2ae179735ca534b2bd5a361e15c21a8ab3
-
SSDEEP
24576:I+ECStp03R9pPN8Ep58/XpcUtbbLqxxdK1N:ImUkCPXtbbGxxQ1N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16840f664dd79d83b3bdc364d797acb3_JaffaCakes118
Files
-
16840f664dd79d83b3bdc364d797acb3_JaffaCakes118.exe windows:5 windows x86 arch:x86
dbd3603cc0a84c03ddd6f3ada69cb33c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapFree
GetProcessHeap
Sleep
ReadFile
WriteFile
ExitProcess
GetTickCount
GetCurrentProcessId
OutputDebugStringA
CreateThread
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
VirtualQuery
RtlUnwind
IsDebuggerPresent
user32
MessageBoxA
ntdll
RtlDestroyQueryDebugBuffer
RtlQueryProcessDebugInformation
RtlCreateQueryDebugBuffer
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 863KB - Virtual size: 863KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ