Static task
static1
Behavioral task
behavioral1
Sample
83384f3da7d274569b91aa8801725dbe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
83384f3da7d274569b91aa8801725dbe_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
83384f3da7d274569b91aa8801725dbe_JaffaCakes118
-
Size
842KB
-
MD5
83384f3da7d274569b91aa8801725dbe
-
SHA1
9d677b1da8f74acd7769e26831ad7531d2bf7325
-
SHA256
12a8b9adf4ac5147fa991ab775089aa2606f1dbcae4fafeb35fd9a03d9bed0b3
-
SHA512
d18ddcd7adf04a13203dc4413e430d7f9cdccfd8e5fe94910a94264afc33f73c310f9d46e05bb2d87a24037518fd8ef20e1f92ccd7c30899f019ec8e534b06e4
-
SSDEEP
12288:9dYw0huqVjjMv09dhs+cTW8mKGImdSJR1EaG2JK0xvnvwcEiO/3IWVNcVt3L:fYmSvMMT85ZCfIvh3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83384f3da7d274569b91aa8801725dbe_JaffaCakes118
Files
-
83384f3da7d274569b91aa8801725dbe_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 567KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE