Static task
static1
Behavioral task
behavioral1
Sample
7055bbf333e619a00ef10941f0ef4db1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7055bbf333e619a00ef10941f0ef4db1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7055bbf333e619a00ef10941f0ef4db1_JaffaCakes118
-
Size
16KB
-
MD5
7055bbf333e619a00ef10941f0ef4db1
-
SHA1
621f9c67e42bb5d0872a926040203f42e973db64
-
SHA256
4c282f0486305a6b21ebe2c3603a801f227f0db66a2fec9051cb37c63c4bddaa
-
SHA512
7ae10d6eb72cd92b20ba09bea546a1c65418454c4fa9e22c5cccfd5c8a5b7612f972883863ebd26800bf6cabc3bca97bbc0920fad94946446238f5bbf3c571be
-
SSDEEP
384:T1fago0VIUjZTVVYaiOSeK/A5VrginNBoq//z:9bGIV5iO+Crg6Bd/b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7055bbf333e619a00ef10941f0ef4db1_JaffaCakes118
Files
-
7055bbf333e619a00ef10941f0ef4db1_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE