Static task
static1
Behavioral task
behavioral1
Sample
8518008fe41b0397352e5042d5e61200_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8518008fe41b0397352e5042d5e61200_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8518008fe41b0397352e5042d5e61200_JaffaCakes118
-
Size
289KB
-
MD5
8518008fe41b0397352e5042d5e61200
-
SHA1
7110fc7172674f8f01af53057d7093e0658c1963
-
SHA256
e5becc956708076e71080f4dfb2a017058bc83f8dfebae2990516db0e5d339b0
-
SHA512
fb3d9a6dd3105f8dd11fbe2cf68ba5cad5ef3dcf363d5204627969ac95005881bae8e1773a9ab08171f55eadc6d50bcea7e67622af23babe1b8ab56a94cbb507
-
SSDEEP
6144:YMsYoAdguo/G3vjoJ+gxs4VQpbzSAMQCaG0MPcgy3E1cBkEB/m2OE:YjjjIoJq4VQpbzt3bG5jcBkSOE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8518008fe41b0397352e5042d5e61200_JaffaCakes118
Files
-
8518008fe41b0397352e5042d5e61200_JaffaCakes118.exe windows:4 windows x86 arch:x86
653e8e8dff63eef38ee7e3d0b16c9e5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetProcessHeap
GetExitCodeProcess
ResetEvent
CreateFileA
OpenEventA
GetConsoleCP
IsValidCodePage
user32
SendMessageA
Sections
UJCFVPgb Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
LjHxzQpL Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tuaeoZtO Size: 259KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE