Static task
static1
Behavioral task
behavioral1
Sample
f38b5087fdb5f4e8e6e1c880140b580f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f38b5087fdb5f4e8e6e1c880140b580f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f38b5087fdb5f4e8e6e1c880140b580f_JaffaCakes118
-
Size
20KB
-
MD5
f38b5087fdb5f4e8e6e1c880140b580f
-
SHA1
ceb013a1ce818dfd1a4f2cb2fb33dc79734053db
-
SHA256
8e9a3437dbb3fbd82a6d7e9783fff7cbdd6dd0137bb3a1ca400d836375f3e0a5
-
SHA512
6f524d864b927b372a9e74ee002ae314a26844a5453fdd797625f6c4a0b3714dd7b1a8eae57cc0de121a887f45de0c32910a5f8dda20ee97eff8cefc46cc5699
-
SSDEEP
384:2pO5eMUSP0Xc0l1ZeaVhpxvENzZGmEDxJufu1AjJ7DjsTmWsPE2AX0VK:2M5If/bPFEPgUm1AjJ7DjsTKzAX0g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f38b5087fdb5f4e8e6e1c880140b580f_JaffaCakes118
Files
-
f38b5087fdb5f4e8e6e1c880140b580f_JaffaCakes118.exe windows:4 windows x86 arch:x86
98cd3ec01c170b9cbd01ae3329f6d90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
Sections
Y0(_)gt Size: - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y0(_)gt Size: 19KB - Virtual size: 20KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE