Static task
static1
Behavioral task
behavioral1
Sample
279d522a25bc41521aa4825ec500b047_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
279d522a25bc41521aa4825ec500b047_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
279d522a25bc41521aa4825ec500b047_JaffaCakes118
-
Size
3.7MB
-
MD5
279d522a25bc41521aa4825ec500b047
-
SHA1
71571baaec5b944b4e25e7ddd5ca7918adad2b5f
-
SHA256
cdbe109f70488057c095df439d471129487eb5c8830bcd1e4a684069b308a364
-
SHA512
968516de5efe9afa5d8e5f77bcab19a042f8cd457ef6dfa22791b48a4fe50eb586e9cb2d09e166b4e9c05b6c0ad6f42ff68ed50d37f5a5395eb5366d544ea13d
-
SSDEEP
98304:F8pYK4Hhi1ksx9Ls/wG0ZPBLtP8PJoc+RFnaeR0Jt:mpz4BmF4/wG+PBN8P4FaeWJt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 279d522a25bc41521aa4825ec500b047_JaffaCakes118
Files
-
279d522a25bc41521aa4825ec500b047_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 3.7MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE