Static task
static1
Behavioral task
behavioral1
Sample
f74d1dd30aadf04b98820fae7be1a2b6_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f74d1dd30aadf04b98820fae7be1a2b6_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f74d1dd30aadf04b98820fae7be1a2b6_JaffaCakes118
-
Size
141KB
-
MD5
f74d1dd30aadf04b98820fae7be1a2b6
-
SHA1
e7e04e3dcdc2b7c3dd506d805e7f927b2de4c734
-
SHA256
c58586a8d366cbb4f8c9821d8f8902fa8efccf9f54601372c3fe1c1cf5021a60
-
SHA512
9d4ef2b4e79661a450b4a3a4d283e2c977dfbdb58e86f99caa7d318fae3311d9297eda359c06d97596a8521270a5e3e56a9a06a7ce0657bc27f72115b6fafab3
-
SSDEEP
3072:pgLjyyueEK5KvzpOKI65wrJCNodfe9s0xFNlCi/PeRH:6Ljxue78zpOKx5wrYNoUzTP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f74d1dd30aadf04b98820fae7be1a2b6_JaffaCakes118
Files
-
f74d1dd30aadf04b98820fae7be1a2b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
a080576c3ed14aa9f17960545b7614e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
_CIcos
Sections
.text Size: 124KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE