Static task
static1
Behavioral task
behavioral1
Sample
2866288187d2345c614d06204dd927af_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2866288187d2345c614d06204dd927af_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2866288187d2345c614d06204dd927af_JaffaCakes118
-
Size
1.0MB
-
MD5
2866288187d2345c614d06204dd927af
-
SHA1
484ce6808a320adebbd8b93cfc0ed998c6f3cd07
-
SHA256
11f2f1aa580cbd1d4be2b175ec614b9da5b0e1a7e6d9658fba806a1d39c7e283
-
SHA512
6541cca7fe5cf09360f7e6fe94b5bafa71810a7c8375a48e6fb5de379e6a25da6e4c357cb4e97d088359fa20364b43e9f0c98b8823728e0764d37284bdcc7107
-
SSDEEP
24576:doXnMABEMIgzxPIJr4oGgIzUtBE9Nhfiq62/QJ4xqjN:doXnISGrrIzUs9N9iCqZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2866288187d2345c614d06204dd927af_JaffaCakes118
Files
-
2866288187d2345c614d06204dd927af_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 95KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE