Static task
static1
Behavioral task
behavioral1
Sample
853dbbd06052d82b4483edcb9724cb1d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
853dbbd06052d82b4483edcb9724cb1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
853dbbd06052d82b4483edcb9724cb1d_JaffaCakes118
-
Size
173KB
-
MD5
853dbbd06052d82b4483edcb9724cb1d
-
SHA1
3c26a35ecc93e099dc212c059285501af30c33b7
-
SHA256
f480a815f020b583908e9a44bd71b136969dc16b591c08b259ee240144a3dc1b
-
SHA512
2f6995c9b6520e03c6330f9411e42098459e825f3ddffd2b93f7974c5b61fe950635ac4315ba55221f281ffb8f7459121b16038a15ea16cd70c67ea90ef88bd6
-
SSDEEP
3072:vBIY0KBSIcmy+DEJfn3FQUyV87A4BZndCJjCXZ8+pyyATGV3OaqKIVKga:SY0Tx+QJf3+UW8LZdMEXpyyATYeamKga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 853dbbd06052d82b4483edcb9724cb1d_JaffaCakes118
Files
-
853dbbd06052d82b4483edcb9724cb1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
6859c1fbd5011b39e2b3c5ccd6eda491
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
Sections
.text Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 164KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ