Static task
static1
Behavioral task
behavioral1
Sample
fde551455de435d5282359976b60e817_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fde551455de435d5282359976b60e817_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fde551455de435d5282359976b60e817_JaffaCakes118
-
Size
42KB
-
MD5
fde551455de435d5282359976b60e817
-
SHA1
10f8dae0da4ced7e9e68972a1e06aacbc02bb22c
-
SHA256
f32ed150e6b72d1bcbf5aa5681b145a491bf9341a0b8188ea1be35f118026c99
-
SHA512
765e10eeea7b50429de66dd24fe80a2c528d542737fac5291a18934cb7a4726d63de0d0da5b73f65bb934c63a2d00a0d16622b652afbc0e5586ebe0aa56d3d71
-
SSDEEP
768:jQY/xQPbn/KUSOWTIQsSG5+32umuIldwjVSa1Pj5x7LX5HD06By:jQY/x2nCUSDi+z+vSlxj5x1Dxy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fde551455de435d5282359976b60e817_JaffaCakes118
Files
-
fde551455de435d5282359976b60e817_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb6f998b6ddc55b66574b1645d6a380b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetTickCount
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ