Static task
static1
Behavioral task
behavioral1
Sample
070c9dbcf7cc3417a623fec1e9db944e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
070c9dbcf7cc3417a623fec1e9db944e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
070c9dbcf7cc3417a623fec1e9db944e_JaffaCakes118
-
Size
39KB
-
MD5
070c9dbcf7cc3417a623fec1e9db944e
-
SHA1
18d228087db7f0a8f03adb334564d2cd5643a793
-
SHA256
84681f82cb01bcd78577a95ec2dc5a2a45a214ad1237a3f4590b7fc1453473fc
-
SHA512
e13fc47e1914d8e61d84e9623bd9a3a534a395fa5f8db5444b7d731ef0f75626cadd3d2248945cc35c0163964b4d221315e97c5c3a1f16378cb54badde5789dc
-
SSDEEP
768:kD1UtjOIyO1whQA8/59COJftcv+7rwQOJ86FtaG/c:isiYw6A8heY8QOJXuQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 070c9dbcf7cc3417a623fec1e9db944e_JaffaCakes118
Files
-
070c9dbcf7cc3417a623fec1e9db944e_JaffaCakes118.exe windows:4 windows x86 arch:x86
316f9661c85558da7e0cc9df6322c345
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
Sections
.text Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ