Static task
static1
Behavioral task
behavioral1
Sample
872075e02bf64828cfb2d286ca47b23d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
872075e02bf64828cfb2d286ca47b23d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
872075e02bf64828cfb2d286ca47b23d_JaffaCakes118
-
Size
139KB
-
MD5
872075e02bf64828cfb2d286ca47b23d
-
SHA1
d01c17d0e20d09055a7a02567b663078c0f6a1c0
-
SHA256
d58639ce2f9769ccf28e8e89256952b86d475f2d784fdc8c1e3b6952303e7fc5
-
SHA512
690ba2bfdf4d2e33f1e2f2a105db4b7c867f6511253ce8c2b9ffefabc2ea902c5ccfcc8c1725b23d15894e1eb92b48aa2e815f658a2f90e2062163ef06d8072a
-
SSDEEP
3072:EpFgf0xyTE9QmW0Pt6+J0eia+9ZStb/wJEK30:EpFgwyTEWmW0Pt6+J0FoJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 872075e02bf64828cfb2d286ca47b23d_JaffaCakes118
Files
-
872075e02bf64828cfb2d286ca47b23d_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE