Static task
static1
Behavioral task
behavioral1
Sample
8799d272358fffd3004908b12d82e9e1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8799d272358fffd3004908b12d82e9e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8799d272358fffd3004908b12d82e9e1_JaffaCakes118
-
Size
182KB
-
MD5
8799d272358fffd3004908b12d82e9e1
-
SHA1
78eb28eea8092d15e4e91eaa3c44aa35c60a5c67
-
SHA256
52f70db0c936b618636ba5ff07fd93dd02ace433326ea3bc348706108a24012f
-
SHA512
e27b5cf6ad1abd1470a3c40ecfea189355f5a62f2b05b64b1eb45f9f08b4d62719a7575989075bb0645a4b59a02dc5bee588e05eaef35a4c20811a2cf25af718
-
SSDEEP
3072:M5+yHXsp/tgehaesF8DTfM8R4mYnCSTOi/apofdX0hMePpiAm7MtqkRLNZoaRqdT:M55HXMlgehM8DTfM8R4dnC0/VEWotjRW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8799d272358fffd3004908b12d82e9e1_JaffaCakes118
Files
-
8799d272358fffd3004908b12d82e9e1_JaffaCakes118.exe windows:5 windows x86 arch:x86
9dc25ad386f815035bf317fdadc3cc02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
advapi32
CryptGenRandom
Sections
.KOMODO Size: - Virtual size: 556KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.KOMODO Size: 181KB - Virtual size: 184KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE