Static task
static1
Behavioral task
behavioral1
Sample
8b7c7bd5b3afebdde3d983f7f33b263b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b7c7bd5b3afebdde3d983f7f33b263b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b7c7bd5b3afebdde3d983f7f33b263b_JaffaCakes118
-
Size
287KB
-
MD5
8b7c7bd5b3afebdde3d983f7f33b263b
-
SHA1
f67b3e4c274c99b76e034437e9e8d28fc80b3858
-
SHA256
d928b663c2d12c53d4a4144751c8b30d83a24c237d9779902263527a7b5fe880
-
SHA512
576a3fddb2019dd9205dd1c4189f53c0abd6936737d313b627c50a7f6e65bcf115b10dbfc9466eaa6a0ec708b3322a981b9ed75c238b0062de53e890fe8de50b
-
SSDEEP
6144:4x0Z6OSbYb089QhhXeRIZ8IhYt0M0HKBUu1nFLqO5E:q0pPb0eQrn2fBn3qOm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b7c7bd5b3afebdde3d983f7f33b263b_JaffaCakes118
Files
-
8b7c7bd5b3afebdde3d983f7f33b263b_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 253KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE