Static task
static1
Behavioral task
behavioral1
Sample
101cabd81b9f08b004f720c759e14002_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
101cabd81b9f08b004f720c759e14002_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
101cabd81b9f08b004f720c759e14002_JaffaCakes118
-
Size
18KB
-
MD5
101cabd81b9f08b004f720c759e14002
-
SHA1
fb1d4cc05d6ced6e0b616ac9c7f2929c1d966c77
-
SHA256
3c6d6f97b9912d9032870b87e812169ec6f22326b16d793fa60c268dd5dad974
-
SHA512
268994620e2ae40919975ab644bc54b4c666b4b770395c4fb4166b1163b5cb501c818d94b5b2314a6f805e162c40ddeab044a5d9f22811a2066beb3c42cc6017
-
SSDEEP
384:yaMnZveW0EoLNfqBVw6KXbhkStWOG7MHKPI1Hsvt7ayhX:9O7opynKXbnWODR1Mh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101cabd81b9f08b004f720c759e14002_JaffaCakes118
Files
-
101cabd81b9f08b004f720c759e14002_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 14KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE