Static task
static1
Behavioral task
behavioral1
Sample
8c2c75f76ee35d1a475525a1897f1a74_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8c2c75f76ee35d1a475525a1897f1a74_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c2c75f76ee35d1a475525a1897f1a74_JaffaCakes118
-
Size
30KB
-
MD5
8c2c75f76ee35d1a475525a1897f1a74
-
SHA1
307a767ced5e39e819c57a12cf48701fed05c146
-
SHA256
ac1f455e44f40f008086f0109534217f133851ef299d91b521ddddd2e8ef0913
-
SHA512
29f08eb8e6839df97bb73aeab323b66a4a90773b008c25a0f93fd2e83171d1996d4803d2c415c41fc8748557ae94fcaa7dd3dcaa3cf4c0f08c7b265be75ce655
-
SSDEEP
768:nULVWS448Tb8Lyqe9Dsv/BcwVfOFWf6NULhTWa/YGsp0:nULES44xLRLEFo6NULhTWa/YGG0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c2c75f76ee35d1a475525a1897f1a74_JaffaCakes118
Files
-
8c2c75f76ee35d1a475525a1897f1a74_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 25KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE