Static task
static1
Behavioral task
behavioral1
Sample
887e4ceefd7d7abc9fe9517e792f309a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
887e4ceefd7d7abc9fe9517e792f309a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
887e4ceefd7d7abc9fe9517e792f309a_JaffaCakes118
-
Size
30KB
-
MD5
887e4ceefd7d7abc9fe9517e792f309a
-
SHA1
7173fca670d2469e16ba9ac3f750578766cdd755
-
SHA256
d112c4ec5945f4f0b395a4148afc532e71758f233b490916ed3ee29e3b6ecaa0
-
SHA512
91e9097997185c0bb3c1bf34b6fc13b99c3768e5f4d0cfa04249e6b92a528702ef31643615aa309a2f09d26a57c3d6258c32d38771fbf7c7c7e99e12a80881cb
-
SSDEEP
768:mgZ/U3g9/Ui85Ah7jE0iZlgVN+Na014Mjf7ZljGe6ghacMx5y8:mgpUQ9l85AJE5l391vZlj+H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 887e4ceefd7d7abc9fe9517e792f309a_JaffaCakes118
Files
-
887e4ceefd7d7abc9fe9517e792f309a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE