Static task
static1
Behavioral task
behavioral1
Sample
242f49c1196a2b4825f3a3d47ecfbe8d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
242f49c1196a2b4825f3a3d47ecfbe8d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
242f49c1196a2b4825f3a3d47ecfbe8d_JaffaCakes118
-
Size
65KB
-
MD5
242f49c1196a2b4825f3a3d47ecfbe8d
-
SHA1
a8a56eae7547eb7f969d6c974f51d0d37d7eb76e
-
SHA256
1bc37916f1842b6abc6c56e26b9ad4885a9ee004f7c76affce0a21fd7d64a9c9
-
SHA512
dc98db284f483aed493c30b30a10676eefc7cb390c6deb83c4fe1a280f4a88dfbe170e256d5e8e8e17d53ccf7285892a37173826a7c4e00c5879adf692749140
-
SSDEEP
1536:/Fl1hUL5sVu8dOL3s691kuVEC8nXPT7o3Cy6Xmixfr0j2D7:1h8j8db01kuVAnXL7oSy62S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 242f49c1196a2b4825f3a3d47ecfbe8d_JaffaCakes118
Files
-
242f49c1196a2b4825f3a3d47ecfbe8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c0c4f68eff15cf5001f6952dc85cb0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
socket
Sections
.d545 Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d545 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE