Static task
static1
Behavioral task
behavioral1
Sample
14c36f1e3b4ceaef315e372be1c2fa66_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
14c36f1e3b4ceaef315e372be1c2fa66_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
14c36f1e3b4ceaef315e372be1c2fa66_JaffaCakes118
-
Size
76KB
-
MD5
14c36f1e3b4ceaef315e372be1c2fa66
-
SHA1
002d0dd794e88ee1bafeb5eda76d1dad2adaf574
-
SHA256
2c0ad773df9a7c1552a12bb91ed1e5db736798618b74545d1b725242e54c849b
-
SHA512
c9eed4d251e9a63c961a6f284726c2bd31f41cf47db620b0d6dea5a02f49e464f0624193d395d17735606b5b21dc28cad09759caf45e3c4e39a28e26ebed44b9
-
SSDEEP
1536:0lFXV8AfErTcVrdrPetiGdW8MgFjpcCoERSEigT08MazYgjFdbJh:0lJffbdPYWZSeVxE0uM6Fddh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14c36f1e3b4ceaef315e372be1c2fa66_JaffaCakes118
Files
-
14c36f1e3b4ceaef315e372be1c2fa66_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 73KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE