Static task
static1
Behavioral task
behavioral1
Sample
782a0ccec477933dd32d8af44d74bee7_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
782a0ccec477933dd32d8af44d74bee7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
782a0ccec477933dd32d8af44d74bee7_JaffaCakes118
-
Size
14KB
-
MD5
782a0ccec477933dd32d8af44d74bee7
-
SHA1
96d91eb0c50a9298eae265730573553f9b1c06dd
-
SHA256
763facc34a046416773983f4530e9507d9e6ce1beb10d2f3bf25f275dcb8485a
-
SHA512
cd98a50e8b9feb0e48bbd34777e7d386ecb79286d1e103113c82b2e4d3a7b0955657f686f2bb7b3c0235483484192da1c99a8e7bf3dc97e35f1572bed7d803b1
-
SSDEEP
384:/TmzqbGDFXd/M8B0pFGapFXso5819zcCC1:/iSG/08EP58boCC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 782a0ccec477933dd32d8af44d74bee7_JaffaCakes118
Files
-
782a0ccec477933dd32d8af44d74bee7_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE