Static task
static1
Behavioral task
behavioral1
Sample
856035c3d1e484932f34c6ed6ce2b5f2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
856035c3d1e484932f34c6ed6ce2b5f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
856035c3d1e484932f34c6ed6ce2b5f2_JaffaCakes118
-
Size
24KB
-
MD5
856035c3d1e484932f34c6ed6ce2b5f2
-
SHA1
ecdfeb37f67f9ad2aa24bff3031d6046f91499e7
-
SHA256
008fd13cee51bb20d965eda6cbcde9ec2570ef1dcaac6b17c661ed468e637cbe
-
SHA512
386617f9bd84503f68c53ef769c843a38f938cf2905e79039e64a53bc3e8f5ab11e60926eb32c9fad8eadd39a1510d9534473ae5f01ddea563f8e28216a34a45
-
SSDEEP
768:Eh/9hKwkzIUPu2Xoki11EkqnLKtm1/QThngi8i4V/7V7V:EkDUuPiEXnLKAhQV4V77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 856035c3d1e484932f34c6ed6ce2b5f2_JaffaCakes118
Files
-
856035c3d1e484932f34c6ed6ce2b5f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 20KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE