Static task
static1
Behavioral task
behavioral1
Sample
0d87ca926bb71b2d363a42204b23c9eb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0d87ca926bb71b2d363a42204b23c9eb_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0d87ca926bb71b2d363a42204b23c9eb_JaffaCakes118
-
Size
146KB
-
MD5
0d87ca926bb71b2d363a42204b23c9eb
-
SHA1
486dc556eb785b5e7441375c6f4d60a8c2a104dc
-
SHA256
4037ad9d215edfe0c873e52f3e9460cc5a13423f7d9bae5d41637cebadda5382
-
SHA512
823ae560bca0f22df1f1f0cf5aed2bd82e2a4a609266a84891388be85b74ec962b05d124d029031ff1559d25b40726332c73f45cd1e6fe483feb3300329fb168
-
SSDEEP
1536:Rdzizv/pQGucHr1jBJRWVf1zwQVgvAE6jd:RdKvHuYu1zwLvAE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d87ca926bb71b2d363a42204b23c9eb_JaffaCakes118
Files
-
0d87ca926bb71b2d363a42204b23c9eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE