Static task
static1
Behavioral task
behavioral1
Sample
077c74709ca441ac99a6b63b2597c743_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
077c74709ca441ac99a6b63b2597c743_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
077c74709ca441ac99a6b63b2597c743_JaffaCakes118
-
Size
240KB
-
MD5
077c74709ca441ac99a6b63b2597c743
-
SHA1
1dd124af5e92822a16acc3f1486f0f07539ccdb6
-
SHA256
1199597ad00b35e66120eb9913eff0100165f6c143a8ae73b16fffdb2d1a3b1b
-
SHA512
93aa491ce7969989a82ea097e2917457b5399af15565692b9c70e617b87ed3cf402f16a5a7acac8157ac7a0fec0773d07bd9f1415c557d75fb63bd854b2f3f0e
-
SSDEEP
6144:wrO+Xkr7uF4nfp/jbjysvt0WGGP4tNDu+V0jKEbPJ8xg:waYM7uF4FHfvhGGP4t1ukQ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 077c74709ca441ac99a6b63b2597c743_JaffaCakes118
Files
-
077c74709ca441ac99a6b63b2597c743_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 239KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE