Static task
static1
Behavioral task
behavioral1
Sample
65ebd9ae91e23336f24ef2429471e5e1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65ebd9ae91e23336f24ef2429471e5e1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65ebd9ae91e23336f24ef2429471e5e1_JaffaCakes118
-
Size
1.1MB
-
MD5
65ebd9ae91e23336f24ef2429471e5e1
-
SHA1
342aaaf472f8f9774424c320e44ec15d322b9c36
-
SHA256
1d044efe106568791a1982046a94204f01612f34affccd716e5f4225583d6edf
-
SHA512
38e83d10b40343db32a0ccc8e7bb1e5db26e942f5e798f052a1b6621a95c02b89bd2218546872d2c91eddd791eaa47ae436bce3fd2e3b00f28dd945bd6c468a9
-
SSDEEP
24576:L5LSFAoJ5psZc2ng+VoMyyvSxp+vgttpIbV10yIWQN+lKUqh:dSFAoJ5p/2ng+KMy+S0gDpIJyWBY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ebd9ae91e23336f24ef2429471e5e1_JaffaCakes118
Files
-
65ebd9ae91e23336f24ef2429471e5e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 1.1MB - Virtual size: 20.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE