Static task
static1
Behavioral task
behavioral1
Sample
847196818ac1db04bb089e7551a13955_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
847196818ac1db04bb089e7551a13955_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
847196818ac1db04bb089e7551a13955_JaffaCakes118
-
Size
86KB
-
MD5
847196818ac1db04bb089e7551a13955
-
SHA1
6f7d00fab905b22c463fcd869eb38b37348e89f2
-
SHA256
1b638462f12d642a863fd3f0780402a50da49a1328f8671e6a5adc4c87e3e67b
-
SHA512
249757a063ffa60f3d59a14f2f0706acc523a9b035f0d826c0a5533c1c383f6d064d3a68e21965e929e2072f8ddb4831291698a600e2a63b2b9c2cae120b014f
-
SSDEEP
1536:g3bY2mKrsMWn/13FueaRioAINwsfLX7jKjf1HCxPPGx2cXtPUsrlKNupa:g3M2mKb4/Z6msfLrjKr1i+ZNaNupa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 847196818ac1db04bb089e7551a13955_JaffaCakes118
Files
-
847196818ac1db04bb089e7551a13955_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 81KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE