Static task
static1
Behavioral task
behavioral1
Sample
337fb00c860a069c1c149fb59c37f653_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
337fb00c860a069c1c149fb59c37f653_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
337fb00c860a069c1c149fb59c37f653_JaffaCakes118
-
Size
28KB
-
MD5
337fb00c860a069c1c149fb59c37f653
-
SHA1
c4e72a5f0404c062b4937272793e4f93bc2ba2b5
-
SHA256
5fee57c6eda4276a69b4fd59f2ae818078b42dfdbf8fc31e1c076a08675d9170
-
SHA512
c1753da70cd08a26ae1e5f85065244aab7033e9436afe87596c82c96f9120ba1588aa56330babb6925a9200eb630157efac413a44039f1d753767fde9b094b45
-
SSDEEP
384:cnwk8FO8djRdoKUmhorhwpqT3cwXuvADUF6ifCP8NPORSUr8lUME:+wk2djHrodh69tfXYlT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 337fb00c860a069c1c149fb59c37f653_JaffaCakes118
Files
-
337fb00c860a069c1c149fb59c37f653_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 22KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE