Static task
static1
Behavioral task
behavioral1
Sample
289e87cc5fcf6666ae3b3aebe4d9e829_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
289e87cc5fcf6666ae3b3aebe4d9e829_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
289e87cc5fcf6666ae3b3aebe4d9e829_JaffaCakes118
-
Size
21KB
-
MD5
289e87cc5fcf6666ae3b3aebe4d9e829
-
SHA1
e3b0e757703a03f83e43792c20f22eff29663077
-
SHA256
784fd0f4e499706a54fbf30a69ae0957fa3942d9c43e5cd8de2db8c5aa5a7495
-
SHA512
232005c957d8964744e9c5e8868c5a8b604ca114518650c4ce2bdf1369090116d027e408218d010ada70395ba2be05df8ad3e69f57b1ba079688954fb359654a
-
SSDEEP
384:z3fdxNic6PngQeofCzR8skFLMX6O3N6d3SljNmSJyHfLwM384QSzLu:PJ0epdVkCv3ljEO6Z8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 289e87cc5fcf6666ae3b3aebe4d9e829_JaffaCakes118
Files
-
289e87cc5fcf6666ae3b3aebe4d9e829_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 17KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE