Static task
static1
Behavioral task
behavioral1
Sample
e7ceef51d20dc93c8fbed7ca0cbaa2a7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7ceef51d20dc93c8fbed7ca0cbaa2a7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e7ceef51d20dc93c8fbed7ca0cbaa2a7_JaffaCakes118
-
Size
23KB
-
MD5
e7ceef51d20dc93c8fbed7ca0cbaa2a7
-
SHA1
95539edfbfa9451163bf4da73f03f018c98e2a91
-
SHA256
ac23bbc51a1e1f52dbe6f8d57662005509755c2a571fa9db2444b167c87e4040
-
SHA512
e9716694463b0e5a8b9d0d0a76ec93da7f59a88f44f01cab2ab616ecfc76e795db40c2ff9ab8e55d1fa40a440df04946f044cf912e0a440e92f93724959daeb1
-
SSDEEP
384:FRDhc+88Hn798mlpnK9OsQxmHAjb2u57wmr30qcPW6E9WS8A9T:TDhcMH798mLnK9OvYkb2ERIqv6E9f8At
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7ceef51d20dc93c8fbed7ca0cbaa2a7_JaffaCakes118
Files
-
e7ceef51d20dc93c8fbed7ca0cbaa2a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 18KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE