Static task
static1
Behavioral task
behavioral1
Sample
ff872cf89a2e179372f14b4abe67c63a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ff872cf89a2e179372f14b4abe67c63a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff872cf89a2e179372f14b4abe67c63a_JaffaCakes118
-
Size
47KB
-
MD5
ff872cf89a2e179372f14b4abe67c63a
-
SHA1
5cd21b377d1a873497877c8bc29dbbfe414483a5
-
SHA256
3c23c7e4c12ad6709e4045d38470f5825a8f7f38a66846b190dc16c034e3b765
-
SHA512
840093eca5746ddec5b12e9cb2fd8cd09aa3fce8a5c220babc73652e26f01366cfb6b89fcf001d0150b1e888f637016e1691d97ad669923d60b9713d5dd1c633
-
SSDEEP
768:/d6fGT5uK1COK8CU1ppZHzuusQVT8SSpqoszZ4wnHySSHOFr/bcgmfEEJ:/d6+F71TKyppousKASkq70HAEaEJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff872cf89a2e179372f14b4abe67c63a_JaffaCakes118
Files
-
ff872cf89a2e179372f14b4abe67c63a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE