Static task
static1
Behavioral task
behavioral1
Sample
1acfdbe0cd5e4c4ed06ceaaa1fd6056d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1acfdbe0cd5e4c4ed06ceaaa1fd6056d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1acfdbe0cd5e4c4ed06ceaaa1fd6056d_JaffaCakes118
-
Size
508KB
-
MD5
1acfdbe0cd5e4c4ed06ceaaa1fd6056d
-
SHA1
c5d9ad978971ef68c131a590ac59bbad7134748e
-
SHA256
2b218317b1a3120b87a37fb183738711a231b6782ecd05ba61a99b86d6cb219e
-
SHA512
a48f30b651fff817db5a4e8f756adae06587b69cbf56a6f42e112ab356b2502c4efb08e43bbfcba2fdad3668f847a25a126972a1c3ec820f3d621c808a1fb5d9
-
SSDEEP
768:EaCaB044YAHIiSkrzzx0iDTOtMxZI5C8w/f1zBmQzTGfmgyq6zU:LC0OMcamTaWf1zwQVgv6I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1acfdbe0cd5e4c4ed06ceaaa1fd6056d_JaffaCakes118
Files
-
1acfdbe0cd5e4c4ed06ceaaa1fd6056d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE