Static task
static1
Behavioral task
behavioral1
Sample
0bfd4ed42022782b169746b1cce13a62_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0bfd4ed42022782b169746b1cce13a62_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0bfd4ed42022782b169746b1cce13a62_JaffaCakes118
-
Size
15KB
-
MD5
0bfd4ed42022782b169746b1cce13a62
-
SHA1
8658868a082d3780e1e651cad8111a1ec92a3037
-
SHA256
98371a5e30eb0395404a41de74ccd486b4513d35164cc7a3871f84c68ea41970
-
SHA512
d7411059e471930c0b521637f2d3d2bec00d1561e1eca62f9b1f0b6de31aa644c78d87f3ead53f3d1c99419e06454bfdd453f2dea96f2a84c26c6e4c8e041a05
-
SSDEEP
384:LmP0q8apM+dhPchKVotqNCHqmGCb7HasGGz2:LjeMGPYbtNqz6Hk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bfd4ed42022782b169746b1cce13a62_JaffaCakes118
Files
-
0bfd4ed42022782b169746b1cce13a62_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7fc3a2077eb44390b1a77ccfa224fc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetSystemInfo
ExitProcess
GetModuleHandleA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 338B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ