Static task
static1
Behavioral task
behavioral1
Sample
5d1816fa6d07c7b24e52e599e38ef018_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d1816fa6d07c7b24e52e599e38ef018_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d1816fa6d07c7b24e52e599e38ef018_JaffaCakes118
-
Size
377KB
-
MD5
5d1816fa6d07c7b24e52e599e38ef018
-
SHA1
4c193fec357b1ff084333f9eace0ca1793fa6965
-
SHA256
f34380e8e7a45907d6c75378eed429e3bb5eb7350f7c752e1b37483d8eda1cef
-
SHA512
e06aa1e4bfc9ce423132d11d849709977f2c6956f3f7f6c0f016587fdf1b41c879a223225e5522ccfdb22ecd6e3d71da3cba30536265c51a230aa63a2613f34d
-
SSDEEP
6144:EU6QZ7MYEL8OF4sCSTt9/YP63VAD+XpRS5aJEqwpwKingG0KJ3WoPa4MqZCFKqOZ:EUNZ724sC8HYPUJGA/ngG0631PLMqZCe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d1816fa6d07c7b24e52e599e38ef018_JaffaCakes118
Files
-
5d1816fa6d07c7b24e52e599e38ef018_JaffaCakes118.exe windows:4 windows x86 arch:x86
98cd3ec01c170b9cbd01ae3329f6d90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.LordFox Size: - Virtual size: 1.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LordFox Size: 376KB - Virtual size: 380KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE