Static task
static1
Behavioral task
behavioral1
Sample
ff501da4d320f64804776c938fe306da_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff501da4d320f64804776c938fe306da_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ff501da4d320f64804776c938fe306da_JaffaCakes118
-
Size
24KB
-
MD5
ff501da4d320f64804776c938fe306da
-
SHA1
62519e3838f45af1049eb88b5f7bebdd86d5b617
-
SHA256
56b16c11a54e7386d5bbd46e7761d4080f11d7d3ac06cbf2a8357c201b57ca7a
-
SHA512
c27d58153698e9fd86f9ecb8fb7180f6698ba9dc9c7f489df1641346b8a7762d394891e6b92e9d491e2f63efae15d46000728af942fc4f8fa81eaffb99c16986
-
SSDEEP
384:E3NnmMlBQVCW0xAZmcNTvvkUqQgbRqFPMVJr46ML+C3q4HIx9W:E9zluYWAqrnga0VJr46DC3n1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff501da4d320f64804776c938fe306da_JaffaCakes118
Files
-
ff501da4d320f64804776c938fe306da_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 20KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE