Static task
static1
Behavioral task
behavioral1
Sample
881cf20d6d8ef76d28858bca5deb2337_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
881cf20d6d8ef76d28858bca5deb2337_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
881cf20d6d8ef76d28858bca5deb2337_JaffaCakes118
-
Size
470KB
-
MD5
881cf20d6d8ef76d28858bca5deb2337
-
SHA1
bfc6b98a646478e4b7147742f1e1dfd73db0bc85
-
SHA256
30443a25b0f377dee32e241de629866830b77c6363de7fef5c597e64ed75a6b6
-
SHA512
49f0c6d1b96c57385065d7d12394a2701399df3d2b41de46c73fe9aaa162e671962b82736dc6961d83ecbb3e1b457d171100f929fdc4b687034c6e03ce80f9d3
-
SSDEEP
12288:oRA1Nbc+gzCtZIZ6azYzn4dYvvr3h65zShAKUfEQs:o61zNYzYjVa+b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 881cf20d6d8ef76d28858bca5deb2337_JaffaCakes118
Files
-
881cf20d6d8ef76d28858bca5deb2337_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE