Static task
static1
Behavioral task
behavioral1
Sample
829f52499453a6ef5cc387e349d62722_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
829f52499453a6ef5cc387e349d62722_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
829f52499453a6ef5cc387e349d62722_JaffaCakes118
-
Size
231KB
-
MD5
829f52499453a6ef5cc387e349d62722
-
SHA1
f7159fb1af7433368265e10b3eca252fccdf8456
-
SHA256
ace91cc3a300c7d75407a1f7efa965466e7edb55ba00922172f6cfbe89c4eae2
-
SHA512
1f4abef637e663ae0283495e9faed81e982fb582c35553de88f879d8f1d1b575474d0d89adf041797c0c47b7c741591d1cb4af17f04ab7735311430337318588
-
SSDEEP
3072:ON7A0R4YMZ41AS25SG5YRtDPWqZpNRHDjrclxU/x3LxOUwcKQWrvmJ/9:g77324OZSPtLvHDjrclxix3dOwKQWrvG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 829f52499453a6ef5cc387e349d62722_JaffaCakes118
Files
-
829f52499453a6ef5cc387e349d62722_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 3KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE