Static task
static1
Behavioral task
behavioral1
Sample
d751fee2c28a335e3de105d54f478ea6_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
d751fee2c28a335e3de105d54f478ea6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d751fee2c28a335e3de105d54f478ea6_JaffaCakes118
-
Size
332KB
-
MD5
d751fee2c28a335e3de105d54f478ea6
-
SHA1
a6a25e2603e735251910adb9f8c032bd7d5a1c9d
-
SHA256
3e877dcafd60525ff6d5ec5dd76a01415afdd321fad8d4f1102b22c71493f603
-
SHA512
a4f897ca7a11974e8d08126ebd98a5a12675de0934f2247e5f320467314ed4a4243804d8d79f4ec54c806b2cf9a537fb241fdc1f755a4546fdb5f948edb78dd3
-
SSDEEP
6144:MM5BqZrr4/U+aJzkJBnd2pmsj/Bg+PHFTuydm8Vcu7cThSkwpA52w6twte9krk5R:MkolWUtJzkJBnd2pmsbSEHd7dvu51Cw3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d751fee2c28a335e3de105d54f478ea6_JaffaCakes118
Files
-
d751fee2c28a335e3de105d54f478ea6_JaffaCakes118.exe windows:4 windows x86 arch:x86
5892074d86d87e0760549b5e53cc29f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
clusapi
GetClusterResourceKey
kernel32
CreateEventW
GetCurrentThread
SetEvent
QueueUserAPC
LoadLibraryW
msvcrt
memcpy
user32
RemovePropW
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
para Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 702B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ