Static task
static1
Behavioral task
behavioral1
Sample
0cf2c3d6ffd0f3ae11fb0ef9126e9dcd_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cf2c3d6ffd0f3ae11fb0ef9126e9dcd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0cf2c3d6ffd0f3ae11fb0ef9126e9dcd_JaffaCakes118
-
Size
71KB
-
MD5
0cf2c3d6ffd0f3ae11fb0ef9126e9dcd
-
SHA1
56fe5ac4672b97e8c6940c3d66c8416931601f22
-
SHA256
c754ff632786722a45846cc77608e2f2810be9c676cae8c2916a5dd721110730
-
SHA512
30640ab8257d10a9eaa69650e209a8f0ba647db9c354bb6f0de022176b82db8e2def07d136788fc5c48e18109b9f60a5c8311b5ced8a6c983544f4b46533d739
-
SSDEEP
1536:RT5KZeQWnMuR7bqubap549g74D4e9t7i8StQQo430EPTpRtV86aF0l/:9ieuuR7Gubap5Q0240ollPTDX86g6/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cf2c3d6ffd0f3ae11fb0ef9126e9dcd_JaffaCakes118
Files
-
0cf2c3d6ffd0f3ae11fb0ef9126e9dcd_JaffaCakes118.exe windows:4 windows x86 arch:x86
807d4dbf88522aca43243ab895fbef96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE