Static task
static1
Behavioral task
behavioral1
Sample
1c5e561d456d923dda756e303dbaf7f4_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c5e561d456d923dda756e303dbaf7f4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c5e561d456d923dda756e303dbaf7f4_JaffaCakes118
-
Size
1.4MB
-
MD5
1c5e561d456d923dda756e303dbaf7f4
-
SHA1
f101eb52ac219a565d2e36e354f816c0339ba999
-
SHA256
34c89730cfc7389d0f0b643aad7d08f5e332cd19ebbe8a88d61e965670b5d8f4
-
SHA512
03dfb724f5bbf0971a5b502d393d7782474f85fb8110f519099d8a397afdb30cd36cd7236f6bdc609692f499dc304c8dda839ebc47b6c7d1c0a6bc2d42aeb81d
-
SSDEEP
24576:rNhRNM/YgpPCwQs9/5G76oE29XLcfWcykxrbaLheIznwS8vGNjQiU0MJ:rNhRZBBs9M7JXLcH/xnrI7wS8+Z1U06
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1c5e561d456d923dda756e303dbaf7f4_JaffaCakes118
Files
-
1c5e561d456d923dda756e303dbaf7f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ad295ebaf153699bbf5ec7f7e50eb70
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
GetProcAddress
GetNamedPipeHandleStateA
PulseEvent
LoadLibraryA
GetLastError
DeactivateActCtx
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
CreateFileA
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
code Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.itext Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE