Static task
static1
Behavioral task
behavioral1
Sample
84868f1680a7dc9cfbcdd3dfb851a825_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
84868f1680a7dc9cfbcdd3dfb851a825_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84868f1680a7dc9cfbcdd3dfb851a825_JaffaCakes118
-
Size
38KB
-
MD5
84868f1680a7dc9cfbcdd3dfb851a825
-
SHA1
4e10a2eb0014e541ea1752c8f755585796f7b22d
-
SHA256
47bbe35ffe0acabbf67c6280727c9ec8e56c69c775f22fe1e6782758ee7fcfd3
-
SHA512
451d9cb77f564eff7f997f654c9a2fe006957bbbe577e86c930248da6537c1f86538653a5634f107fdab6e8ca973231d03e84693a3953fe7a2c2ea0790b2d85e
-
SSDEEP
384:0hOLJa3Fes99LmjSlmIPvBcEoLdn2X0oI+TLbZ5w0j4cm2HV1NHrmGTJBnvH7X7B:AOq9yjSlmmyu0oI+E4TmuNHxBvD7UA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84868f1680a7dc9cfbcdd3dfb851a825_JaffaCakes118
Files
-
84868f1680a7dc9cfbcdd3dfb851a825_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 22KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE