Static task
static1
Behavioral task
behavioral1
Sample
fe4d20a0b25b96a21cd2624a1a0fa948_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fe4d20a0b25b96a21cd2624a1a0fa948_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe4d20a0b25b96a21cd2624a1a0fa948_JaffaCakes118
-
Size
648KB
-
MD5
fe4d20a0b25b96a21cd2624a1a0fa948
-
SHA1
b42917d2d9924d25e67af719bcf05f53503b161f
-
SHA256
5df703c434fa6436a086e324eac05279a06e1af323638701aa3bd2344dc2d93a
-
SHA512
39d7cafca1b6b55529d11df65513e470c0e282cfbea81d8613ff498d9dd68b6839aee13b380f5fbd786d966cf04901b3956c907f108e5c69d9e25ff4fa591ac1
-
SSDEEP
12288:QbCv1poWxJpcEiPAx/xOB2N0qcKKfGZb4O5GKjkw:tvDoAxO+cPwbD5Gyx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe4d20a0b25b96a21cd2624a1a0fa948_JaffaCakes118
Files
-
fe4d20a0b25b96a21cd2624a1a0fa948_JaffaCakes118.exe windows:4 windows
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 65KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE