Static task
static1
Behavioral task
behavioral1
Sample
433dc24d6f830acc835bfe89ae3fe808_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
433dc24d6f830acc835bfe89ae3fe808_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
433dc24d6f830acc835bfe89ae3fe808_JaffaCakes118
-
Size
64KB
-
MD5
433dc24d6f830acc835bfe89ae3fe808
-
SHA1
50d09f9d6429eafd11aacfc26ac7b44a293ace5c
-
SHA256
e1d7f904cf16fcb4ae102d32dad9d71d41a3aab3813a02c3af450f80e4502e90
-
SHA512
bff04083938a26aca4b47919ac1536b2b53ae77e6cb1674547f74b70a1cd5f285da61666e9307deb7eeac044fe18664199b9fa031314b1aa434ee11c14e97f74
-
SSDEEP
768:zwYRgXb/NnSmtvVQs3PzAO3Z8gkqUZ17XyF7zwjmH3Mg59v96c5QZIAJyYd/:UYRgXb1n7N3PMCrkJqzwjgp6mQ2hYd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 433dc24d6f830acc835bfe89ae3fe808_JaffaCakes118
Files
-
433dc24d6f830acc835bfe89ae3fe808_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 50KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE