Static task
static1
Behavioral task
behavioral1
Sample
079d4483a7f245b18bfdc4870a11983c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
079d4483a7f245b18bfdc4870a11983c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
079d4483a7f245b18bfdc4870a11983c_JaffaCakes118
-
Size
70KB
-
MD5
079d4483a7f245b18bfdc4870a11983c
-
SHA1
692cd8c1a051e765c8f5b7c40771a420add4cbd9
-
SHA256
ba0f05f7f2486e1b3d827df6a7d162a2452ad3621189171f40995d3bee15edc9
-
SHA512
96f43a560bf812db18092f7353080bc3dfbe1fc3818596127e647fc686c1320ff84ddeddb4bddd4fd89b9892b3d245ed9a7e5bc8e57693d549958918946a78ef
-
SSDEEP
1536:a3EsQghuyxGcwn8iVihwp7VIQwzdcyKQm2R6u2iZTj/CvWtsx4Rci125:a3E5gZGcwn843OdrKQmcWiXq4RNi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 079d4483a7f245b18bfdc4870a11983c_JaffaCakes118
Files
-
079d4483a7f245b18bfdc4870a11983c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f11f9d43992b002b8d32d99190434e0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.packed Size: - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 69KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE