Static task
static1
Behavioral task
behavioral1
Sample
089c5d59d528483e289604b68d5c76d5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
089c5d59d528483e289604b68d5c76d5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
089c5d59d528483e289604b68d5c76d5_JaffaCakes118
-
Size
24KB
-
MD5
089c5d59d528483e289604b68d5c76d5
-
SHA1
f681bfccb22a53a802bf6821f432e029b3d795d7
-
SHA256
3c8e8f355f4cfa79d6904c5e72bfd3d83bcbc80bd161914483d06032c14d6bed
-
SHA512
cdcb93eaec67e3d18db67e03b0a71c8cea09d6c6610012bf8dabf34e02f96ad160390eb5407e87e9b348e580ed284ab3c5ddcbfbcbfee1a3b3a6e57fbb63eb36
-
SSDEEP
768:Nm8FsLXePgX21mV87Q2V3Vak4slNWkEA3a0fD:xUG1mV8FtV5nNQAxL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089c5d59d528483e289604b68d5c76d5_JaffaCakes118
Files
-
089c5d59d528483e289604b68d5c76d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE