Static task
static1
Behavioral task
behavioral1
Sample
890b6aa77be363d038f24c87a79d359b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
890b6aa77be363d038f24c87a79d359b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
890b6aa77be363d038f24c87a79d359b_JaffaCakes118
-
Size
28KB
-
MD5
890b6aa77be363d038f24c87a79d359b
-
SHA1
296969e7f2b748ae346da1390a28bfe8ffa870dd
-
SHA256
7c1238130527dbe360a2746f5c6343c81f53b3f51c4b1e04aeb607f87a2d6c76
-
SHA512
357a5c1a18229b1804864982400fac13957d7d453163095afac81ede49aed1fb11e073c1efb88c46cd924ed533fabbf1b40d1b839a671cb028efc3eb1023dd4d
-
SSDEEP
768:5dtODxawq3SGmdw4IkkH59C61NxSG2Cm/45:btODpqCGmdw4IkA3LRm/q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 890b6aa77be363d038f24c87a79d359b_JaffaCakes118
Files
-
890b6aa77be363d038f24c87a79d359b_JaffaCakes118.exe windows:4 windows x86 arch:x86
98cd3ec01c170b9cbd01ae3329f6d90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
Sections
Size: - Virtual size: 96KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE