Static task
static1
Behavioral task
behavioral1
Sample
e9f5788ba2b875d7debe7d398d0eb4b1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e9f5788ba2b875d7debe7d398d0eb4b1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9f5788ba2b875d7debe7d398d0eb4b1_JaffaCakes118
-
Size
643KB
-
MD5
e9f5788ba2b875d7debe7d398d0eb4b1
-
SHA1
821bfe0ddd6384c02a8c5565a1689702d3d44a53
-
SHA256
211f69de0184d66a4525463a4056932fb7fea95d96ebfce09930d295e95488cd
-
SHA512
ac6d1e2882120e26ca1d99e77bb0c64923e086e697ae839f4e6b0ec237fb3880859f2e03d5729107685470068691353388fbd1adace9bd80894133d2cdc5bd5b
-
SSDEEP
12288:VLG6JA70VxW6hSlLOQ0UCKO6H88DdMBLZoVjiIwaghvTDAsAuFekhX7xp/L6i6Y:VC6JK2hkLOhUCKO6cidw6jWaQ/FekhL1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9f5788ba2b875d7debe7d398d0eb4b1_JaffaCakes118
Files
-
e9f5788ba2b875d7debe7d398d0eb4b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 627KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE