Static task
static1
Behavioral task
behavioral1
Sample
8c6fb28f6b9522c88ae179c2139c7cc1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c6fb28f6b9522c88ae179c2139c7cc1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c6fb28f6b9522c88ae179c2139c7cc1_JaffaCakes118
-
Size
55KB
-
MD5
8c6fb28f6b9522c88ae179c2139c7cc1
-
SHA1
ad591f3b707963151a664fd1bc7f00be3cd0a4d3
-
SHA256
438e5cc8125507f50a69b869ff05c710cd5af0e14de9f23c8893731aece2dabe
-
SHA512
e8612185fb0ba5034c5aa321b293415b3c52201a9c4b8f1b2b4876342e8bdeb5a31a12e9ce93def6ff34cd949f6b00a919d04210ce8bda96b4bfafaf9ee013ff
-
SSDEEP
768:EQdnfWl23Z35V3nmNL1dRhV2HO8KHjp8GvzfV/xKTRBHAz+LtQ7BesHvj9Dy:ESfNR3mtvV2HFKHmSztK1AatQ5PZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c6fb28f6b9522c88ae179c2139c7cc1_JaffaCakes118
Files
-
8c6fb28f6b9522c88ae179c2139c7cc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
24734dd2e70099b3dbbd6bd67280238f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
wsprintfA
ole32
OleInitialize
oleaut32
LoadTypeLi
Sections
.PACKMAN Size: - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PACKMAN Size: 79KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE