Static task
static1
Behavioral task
behavioral1
Sample
004277cd89d71bfee489e793ff44eedc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
004277cd89d71bfee489e793ff44eedc_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
004277cd89d71bfee489e793ff44eedc_JaffaCakes118
-
Size
171KB
-
MD5
004277cd89d71bfee489e793ff44eedc
-
SHA1
be0eb15622b1fb6a94b4eb2e7a72b1ffe688a16e
-
SHA256
2aa939e8e641716a885689f4572c0cea187fd403b80053a7a61815d48ba119ca
-
SHA512
a2024d14382da0a5da14f094d9dc6c83642da3e9bb8680804b8b7c5e19e777d6011dff1a7f2f29802e006ad6b1f383e3bf9966f88a127134160e2f732bfa73c5
-
SSDEEP
3072:Vkp8aqMnfymIiv1zwLvmQYu275QX5F41:VIqMn6mH1zia75QX5F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 004277cd89d71bfee489e793ff44eedc_JaffaCakes118
Files
-
004277cd89d71bfee489e793ff44eedc_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE