Static task
static1
Behavioral task
behavioral1
Sample
066f8b65f3d7756019c7057f3b04bca5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
066f8b65f3d7756019c7057f3b04bca5_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
066f8b65f3d7756019c7057f3b04bca5_JaffaCakes118
-
Size
405KB
-
MD5
066f8b65f3d7756019c7057f3b04bca5
-
SHA1
640e94a9e39f28880c1f495b60c1d4382057627f
-
SHA256
8b65bf1743ae10378658768d6c5906882573276b4fed42134b13657cb215dfa7
-
SHA512
0599d1c0c08fadd02bac9c1f730d4f79d6b192434e80cf2f05757ad0ee96d251ddde28b1db7bbcbff61ea8c442aa56f50fb22236512b813441e20fede3fd9793
-
SSDEEP
12288:X/HLfD72qTZHFu3qTZHFuq/HLfD72qTZHFu3qTZHFue:PrD7brD7z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 066f8b65f3d7756019c7057f3b04bca5_JaffaCakes118
Files
-
066f8b65f3d7756019c7057f3b04bca5_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 23KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE