Static task
static1
Behavioral task
behavioral1
Sample
19f7f340db90a9498def617421b11ee0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
19f7f340db90a9498def617421b11ee0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19f7f340db90a9498def617421b11ee0_JaffaCakes118
-
Size
68KB
-
MD5
19f7f340db90a9498def617421b11ee0
-
SHA1
77064a54f20e21d4553e3c932c7575b9ab172cb3
-
SHA256
dfb0d910dc9168d22ed7a6e9c34d4b44c2291f219370713315b79ea8a6f70cde
-
SHA512
3766edb799e6804dc0ff4dab47246b0ab5354e1106a0f2f5a8b033f3db686bfde4a4f8ca9c17f8264f0c836df2ccdd33a43cdadf29d9b280a507058e38e97f80
-
SSDEEP
1536:9MtlZfTpwpVLPvtbcqUcgvzs4AmJWFp4AVT/Yv+NT2XIlz:90ZfTqxvtbc1Pr+FTbYvC2sz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19f7f340db90a9498def617421b11ee0_JaffaCakes118
Files
-
19f7f340db90a9498def617421b11ee0_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf61fd0c4995f52e6502284e50c39e02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
Sections
.cfdt Size: - Virtual size: 240KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cfdt Size: 68KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE