Static task
static1
Behavioral task
behavioral1
Sample
04de22c0ff71844d925b0eaff9a0105f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04de22c0ff71844d925b0eaff9a0105f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
04de22c0ff71844d925b0eaff9a0105f_JaffaCakes118
-
Size
33KB
-
MD5
04de22c0ff71844d925b0eaff9a0105f
-
SHA1
7006815661559d049a3b94f27582d29173487837
-
SHA256
169d1dc54a66ab70ae78ff5e654e1e53d4241aaa9ae322278de52f4cee66aa58
-
SHA512
57da02f49abfb972c2969c5a90ed83b49856ef6671d30eb34a23fed43347bac6144de25a8e73ff4dd62aeb4ac58b716b1b25fc63dd99525ed6628dc4cbef54c2
-
SSDEEP
768:FDcBcdTwNch6z8Cbvc6OhrBJz/AV5kaH8tDcRSb3lqNhu3OpSPZGaxSN4s:2BcEhckut4RSTlqOuoZGOSN4s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04de22c0ff71844d925b0eaff9a0105f_JaffaCakes118
Files
-
04de22c0ff71844d925b0eaff9a0105f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 29KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE