Static task
static1
Behavioral task
behavioral1
Sample
02d597618179c9cffcc5c3f96d83ebb6_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02d597618179c9cffcc5c3f96d83ebb6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
02d597618179c9cffcc5c3f96d83ebb6_JaffaCakes118
-
Size
67KB
-
MD5
02d597618179c9cffcc5c3f96d83ebb6
-
SHA1
f73a80929e8364c860d08c32e53019f972812e4d
-
SHA256
c5a7fde002b932ce63295b9bfabb96e0e23a163826518c0b1e467b6dd4efac28
-
SHA512
42ea8da5e80b6f66159e2329da4941ddc9d33def0368f32b595abb58bc446f304d0a2208b50a7c22b7ac530b00b02311d1f88609f1f93d416991b41dc5fd759a
-
SSDEEP
1536:wpALAQIkgmRTS4jDtfs0dP2JcQPsQJL7BaA33TKxF:qwAw3btxp2FDJAnn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02d597618179c9cffcc5c3f96d83ebb6_JaffaCakes118
Files
-
02d597618179c9cffcc5c3f96d83ebb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c0c4f68eff15cf5001f6952dc85cb0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
socket
Sections
.cd4k Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cd4k Size: 66KB - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE