Static task
static1
Behavioral task
behavioral1
Sample
71bfd500d390d3b8e587d2eea7435416_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
71bfd500d390d3b8e587d2eea7435416_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71bfd500d390d3b8e587d2eea7435416_JaffaCakes118
-
Size
324KB
-
MD5
71bfd500d390d3b8e587d2eea7435416
-
SHA1
8958253703b42fa563d457343f1f2f70b6e2b67f
-
SHA256
2dc19297428760f3eff9a86f4d1b53d79d2c21ce3479e563ee4e8ab4079c5422
-
SHA512
b068ee1ca532a46675f5bfeb2fdda88f273cf87c5bff66a6f2ce428faee473741a4238c56060fa29abae416921d742543e80816549fb0bb47270405ea4c65326
-
SSDEEP
3072:wbyGf8kToxFvQlN9c4+yXZHT9rnxENCO1YvyOTFl4ryNteRz9DTr3axibK45tk+7:NQToxFScnyJHTxnxIXGXQyNshXFhwuV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71bfd500d390d3b8e587d2eea7435416_JaffaCakes118
Files
-
71bfd500d390d3b8e587d2eea7435416_JaffaCakes118.exe windows:4 windows x86 arch:x86
de8d918bb20ca5c91e4fb1b4badc08a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateActCtxA
DeactivateActCtx
GetProcAddress
LoadLibraryA
GetModuleFileNameA
VirtualProtect
ActivateActCtx
Sections
.text Size: - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_rdata Size: 4KB - Virtual size: 266B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_data Size: 4KB - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ