Static task
static1
Behavioral task
behavioral1
Sample
0f6d43bbbc7d5f85f8dd3af10ab5284e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f6d43bbbc7d5f85f8dd3af10ab5284e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0f6d43bbbc7d5f85f8dd3af10ab5284e_JaffaCakes118
-
Size
270KB
-
MD5
0f6d43bbbc7d5f85f8dd3af10ab5284e
-
SHA1
49aadc912e0e906c03451b22ea3a405c57208fdc
-
SHA256
a4628e2a4dc910acd832901937ffae522616129ef9d3aa2ce2bc3080862493ad
-
SHA512
2376ca86c8840163331ff8788b53b10be3c8fd8004632b7668c07602073b6086d83478693ecc01000974150fd7a86a59a7e152c7a5b2694c3f63cef9ad62b874
-
SSDEEP
6144:tTUQcm3so9C/Qz9Iz2rNX5Shm5q6YOulIah+5e3cRh8yRv+5crBbC:tTbP3lTz9PrWh6w+ZrGIBbC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f6d43bbbc7d5f85f8dd3af10ab5284e_JaffaCakes118
Files
-
0f6d43bbbc7d5f85f8dd3af10ab5284e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 243KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE