Static task
static1
Behavioral task
behavioral1
Sample
8b03fa21f056722d3c56a1c7f50d4328_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8b03fa21f056722d3c56a1c7f50d4328_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b03fa21f056722d3c56a1c7f50d4328_JaffaCakes118
-
Size
81KB
-
MD5
8b03fa21f056722d3c56a1c7f50d4328
-
SHA1
008eb0580792b9a1b168a2093c91c9749220f5e1
-
SHA256
552b6555fc0c98ab7009a68af7fd6136b496c91670110b6d92d98f08c5864882
-
SHA512
846d1941768d063e5705fbcf2e3b93bb89d365732b69769d39fb9c8aa08ec47f5fbf687df89c02d38612d2ca2cc774403905a7560486136bd93c1882fdbce361
-
SSDEEP
1536:ZtUHvO1Uo8CaiujL/GoSXU5QCIuMsgroe3E4p6ji+/NUQ1xGTaY:Z0nZCojrG1kIs631U9UQ1x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b03fa21f056722d3c56a1c7f50d4328_JaffaCakes118
Files
-
8b03fa21f056722d3c56a1c7f50d4328_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 63KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
A Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
A Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE