Static task
static1
Behavioral task
behavioral1
Sample
712f3324efa18696204353668bf4d940_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
712f3324efa18696204353668bf4d940_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
712f3324efa18696204353668bf4d940_JaffaCakes118
-
Size
83KB
-
MD5
712f3324efa18696204353668bf4d940
-
SHA1
effaf065f2f444669b244042947fc7684375a9df
-
SHA256
979cebe1d690e7a2d1acef4dd34e4287a1c707f280c1d56d8c20625c00f6b9a3
-
SHA512
f196fc9a37e9d539aa702b951e40b0c9dd822c3093244429792691e0d7c607de729346814e8974293377dddf38ce49650578f45b787a8bb820ec1e323d91d5d8
-
SSDEEP
1536:hZTqXP58XpBv7xH51tNPvRa4aEz54271R7ncw4s:3Tux8XptJbbha4aEz5427vIw4s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 712f3324efa18696204353668bf4d940_JaffaCakes118
Files
-
712f3324efa18696204353668bf4d940_JaffaCakes118.exe windows:5 windows x86 arch:x86
72d767aa3cf52db3979758fc7c93b1d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualAllocEx
msvcrt
signal
raise
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ