Static task
static1
Behavioral task
behavioral1
Sample
841dffbf4af11e59ff239a0ecc24cd05_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
841dffbf4af11e59ff239a0ecc24cd05_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
841dffbf4af11e59ff239a0ecc24cd05_JaffaCakes118
-
Size
106KB
-
MD5
841dffbf4af11e59ff239a0ecc24cd05
-
SHA1
8c68a856ef7e68d31cce2326a104d426123778bc
-
SHA256
939d616eb70487bafa4d256ded03182c2c0fce177f8d8b97dd8f44505568db36
-
SHA512
d8c8a31383339a570d466ddb5fda535e6c23005eaf4c05f4df3d20f0f8cc34fb3bf047b7f14d463f6281b52f3bde34dc0a63f01132a712c84fade788077c769e
-
SSDEEP
768:0Phg+bINh/0cNNduw8RiMc5lU1wzNE6Xf1zBmQzTGfmgyq3rDFUBiyd/:sbIbNHiRJQrzXf1zwQVgv3lUBNd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 841dffbf4af11e59ff239a0ecc24cd05_JaffaCakes118
Files
-
841dffbf4af11e59ff239a0ecc24cd05_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE