Static task
static1
Behavioral task
behavioral1
Sample
8c4c9710314fabf23f7afbfa06f9b4ba_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c4c9710314fabf23f7afbfa06f9b4ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c4c9710314fabf23f7afbfa06f9b4ba_JaffaCakes118
-
Size
45KB
-
MD5
8c4c9710314fabf23f7afbfa06f9b4ba
-
SHA1
5649e407ecfbbe96d61fc6ca1fc5d417b81e6554
-
SHA256
6f4a405e35e06b7cde76df6e9e3c5a56ad10e66465999bb7f23d16776ce8ae68
-
SHA512
ab212e1b8102b1c5582004d8794c26cd1d8b010113bf47095dbc56db0e428905a6b2a6a8719a0f2876668ba4f95a8b2497bf0d0c449fe6632e50747def2b8c07
-
SSDEEP
768:KQ+J6XKm4YVuQP9z2R8YKhCtxSVfOz+76NL2:iIf4YV1FaSA+2z+7B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c4c9710314fabf23f7afbfa06f9b4ba_JaffaCakes118
Files
-
8c4c9710314fabf23f7afbfa06f9b4ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 18KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE